659f9faa0e441457202fce0fdbdc5626 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

659f9faa0e441457202fce0fdbdc5626
Size

1.6MB
MD5

659f9faa0e441457202fce0fdbdc5626
SHA1

53692240b0c9e0f08ee6ba78863ae6ebc4fb8061
SHA256

19717c7cf44ab4472c15d03c644082aebf6b3a97fa6ccab30b97a419dbe7ac61
SHA512

6beab730688520ad03e079299e8d75098ea6ce665dd9f7d50ecf788360bd95dc6985122bd324f2b62b14b932e3b8de2f8eee4189270aa3e2f47aaab95393530f
SSDEEP

49152:kF34qoEWemBRemf93szA6aj6kzE0k/a0mU5:kF34qoEmS97W6kZDU5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/aceclockxp_setup.exe

Files

659f9faa0e441457202fce0fdbdc5626
.rar
aceclockxp_setup.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
file_id.diz
license.txt
readme.txt
下载说明.htm
.html .js polyglot