3b855787cceaca86b9531489b200da54 | Triage

Sharing

General

Target

3b855787cceaca86b9531489b200da54
Size

5.8MB
MD5

3b855787cceaca86b9531489b200da54
SHA1

c13e1a27222091d2e0e9dd0dcd346287ad5fb629
SHA256

1787b83cad19e5875930d10d2d72c0cc8561fec008e118c950745df1d4f2e1d4
SHA512

96a09fb0c857671349d9f5ec5fbd8153be7f4015436d972dadc1cd09f6e488394efbd86719bebc294478fbb1aa841d1b9bfebe271790be451418a22ed81fc4fb
SSDEEP

98304:dlp1QABljax0XVH/AfV9orBgNln1vEHSJpiYMeghvjPB7p/+W4+AI26TTLxtjYf2:dmAPy0XS99oslJEqkzhvjPPW4AFIHxt5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/洛克王国火神辅助4.6/洛克王国火神辅助v4.6.exe

Files

3b855787cceaca86b9531489b200da54
.rar
洛克王国火神辅助4.6/功能介绍.txt
洛克王国火神辅助4.6/洛克王国火神辅助v4.6.exe
.exe windows:4 windows x86 arch:x86

baa93d47220682c04d92f7797d9224ce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpy

comctl32

InitCommonControls

Sections

Size: 4.0MB - Virtual size: 8.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 4KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pbkpqoqb
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mclfvzfs
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
洛克王国火神辅助4.6/游迅网.url
.url
洛克王国火神辅助4.6/说明.txt
洛克王国火神辅助4.6/辅助界面.jpg
.jpg