e989c0d7348d8eae43126a386a6927da435602963648872f456c662de70630e8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e989c0d7348d8eae43126a386a6927da435602963648872f456c662de70630e8
Size

911KB
MD5

5cc844806c4e231e86bd2f1a2eda4f25
SHA1

f05e5ba3731c7b9a75c7441912d823e4b1c98db4
SHA256

e989c0d7348d8eae43126a386a6927da435602963648872f456c662de70630e8
SHA512

87a11d259dd82508192217ad75e792e13a0b4965cf955102db9e0891c5910c7ebc7265966fd1c1039776234198f987ab0e77c6cda7d7e578d7b6c1a8bba3c0d8
SSDEEP

12288:lvkCI8fErABrrY3JNcNfnjXWdtEf2nMqsE/3ZeJRQX9Clfw1JqOA9DPWfemXk7cR:8rEnXWJnH3AJRQNClfw+39mlAZQx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/投保人-王磊、张丽丽/__MACOSX/calcs.exe

Files

e989c0d7348d8eae43126a386a6927da435602963648872f456c662de70630e8
.zip
投保人-王磊、张丽丽/__MACOSX/calcs.dat
.zip
投保人-王磊、张丽丽/__MACOSX/calcs.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 916KB - Virtual size: 914KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 164KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 84KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
投保人-王磊、张丽丽/__MACOSX/人员名单.xlsx
.xlsx office2007