7220f43ba43ec246c6ce297d44137c63 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7220f43ba43ec246c6ce297d44137c63
Size

2.7MB
MD5

7220f43ba43ec246c6ce297d44137c63
SHA1

380b41653f01b362a372aaa1a993be3c2cedcebd
SHA256

55ac9ee7695e3cf7565f9570ab20f2cd7985326de82f7d82af0cec71c388462a
SHA512

06e321e0987d530e0b20edb403acd502bb6a832cd5ea973dccce135e9f375d428ccd93a71c97d753125d6ceb5c91241596560c5a4654340591f0ffa385267fc6
SSDEEP

49152:9UCSaDc65XUq6IX4oBMI51zJDqV6C3IShyW4J5UqDLxhbsiNmmA:9pSscsF7XBBMI53eb39hj4J5U6LMiNmD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/推广软件/main_setup_vagaa.exe

Files

7220f43ba43ec246c6ce297d44137c63
.rar
推广软件/main_setup_vagaa.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ