41060a96772e0e7832ab4d2d92e2aa5a76f9a0c126cee2a4e23355d90d9efa33 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41060a96772e0e7832ab4d2d92e2aa5a76f9a0c126cee2a4e23355d90d9efa33
Size

177KB
MD5

af0a6be3241eabd379a3a28fad58784d
SHA1

148113160d0a295740003442bb2de16510b3adb2
SHA256

41060a96772e0e7832ab4d2d92e2aa5a76f9a0c126cee2a4e23355d90d9efa33
SHA512

9f85764570c854c424956b2bed437dfb66a90b8f8b675385ac4c838cf7dfaf64c1668195fff4ffe41dd582185e4feb77a0552ab4d5ccfada36a4be135c6eb804
SSDEEP

3072:nRMy8+DLuJDQJk68abkTvJ6YOwtgOsabyzGXXkd/9NkVUJXfvdiZNf6MD:nX8+YQNwT0YcOsabMwkxJXoZNfTD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ļ.exe

Files

41060a96772e0e7832ab4d2d92e2aa5a76f9a0c126cee2a4e23355d90d9efa33
.zip
config.txt
ļ.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

PDB Paths

E:\2023715备份\New Folder\输出文件名.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 412KB - Virtual size: 411KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ