7f55c75d5dfa50e9a196388053adce2e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7f55c75d5dfa50e9a196388053adce2e
Size

2.6MB
MD5

7f55c75d5dfa50e9a196388053adce2e
SHA1

a26ddca4d120471fb6ff069d68cdaa063d72e17c
SHA256

53ab3de16335823322f6c1612ed4a1e40ad39c9a47057e166ea7ebfc6a89304f
SHA512

5aa3365ce7fd6c1d969c99957b7710e3dc2c075511825e24f9b1d957786bb4602228f5012ccbb4cd1a4d1c1ba6f6fd7bedb69ac13c01c57c2d4a6ef7de8e1d9e
SSDEEP

49152:kiBJ+GCffeejh/25LGnI7r/BhM/BeKXFwlJv/sfBi8aLKAZLGndt1lnw2kLYYsJl:73QCGnEr/BiZRXWv/wc8aLK62P1i2kL0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/TimeRecorder-v4.3918/setup.exe

Files

7f55c75d5dfa50e9a196388053adce2e
.rar
TimeRecorder-v4.3918/TimeRecorder.HLP
TimeRecorder-v4.3918/TimeRecorder.cnt
TimeRecorder-v4.3918/readme.txt
TimeRecorder-v4.3918/setup.exe
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
TimeRecorder-v4.3918/新云软件.url
.url