8f6afcf656fc60599cfdb8302ae2ea7c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8f6afcf656fc60599cfdb8302ae2ea7c
Size

1.1MB
MD5

8f6afcf656fc60599cfdb8302ae2ea7c
SHA1

60614c169b99ee45faefa78150a059ed5bc2692f
SHA256

96ce51d0223f8cefe9775e2a66b2e101655f15a199c04fb757ecd2361a664240
SHA512

52cbc6c4b34513cf156bc53367767173dd4b70f9116103ec570bb0b4b9f3594773c41b173216f040b5d8869128115fa568e6a3e668571b5032e76be4e89be06e
SSDEEP

24576:OB2d4wWAJvw3Us08wGyUI8FJBgkDm3fTWrmDflpdIpEYC8Y7X:1xzx8UvODCfThjvX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/面对面一键多开.exe

Files

8f6afcf656fc60599cfdb8302ae2ea7c
.rar
新云软件.url
.url
面对面一键多开.exe
.exe windows:0 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ