3aa2a2a805a430f08c105a0d38bea367 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3aa2a2a805a430f08c105a0d38bea367
Size

344KB
MD5

3aa2a2a805a430f08c105a0d38bea367
SHA1

0a102f0f546c11eeba34fdc28cb49950129bb1d2
SHA256

d33cfc19ca57645e4748ea2ef47ff4caf6e70cb0cd90168477f59eeb2522ca36
SHA512

38ac36a351129648ea9603864b72985b25f4b113f584a3b978c091c03334e41d0bef9f377821f97098613d8742c92cf9b29d3507aee673c5c9e8b4271514c3e7
SSDEEP

6144:EwhoFzZvamhC0Ac7TtFbUgdQwxObbsAlrBhDAygliBVpHiZtx:h90CrcsgdQwabhrzJopZtx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/HA_VPing_CZ.EXE

Files

3aa2a2a805a430f08c105a0d38bea367
.rar
HA_VPing_CZ.EXE
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: - Virtual size: 720KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 312KB - Virtual size: 316KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wAREsNAP.GIF
下载说明.htm
.html .js polyglot
汉化说明.TXT