aa9347d8b0b0692fc9c1e16ec0f571d6 | Triage

Sharing

General

Target

aa9347d8b0b0692fc9c1e16ec0f571d6
Size

1.3MB
MD5

aa9347d8b0b0692fc9c1e16ec0f571d6
SHA1

8b81d6b6e89e1f983242e1bf09bb80d0c39c43c9
SHA256

16f6170aab7382e2ee9a2f67a1e906f61736e02f2b425a60a3d2586e667e9fdc
SHA512

359bdfc50bca8420decf1e362590a76ec23c31ea88441ef43d31b6213067370b46a2f71a70b85dfe37cda4bd0e61aa80fe389101e11848b22b73bf04f93ff070
SSDEEP

24576:juF1D4MOgon+paM6HnkiBz5or/b/PKNHni9BQHtJLMEj20ZhiRxOgVky55Q9ABlI:juFqMOgo+aM6/BWDb/PKNHD7MEZiRdVY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/安全防护辅助/安全防护辅助.exe

Files

aa9347d8b0b0692fc9c1e16ec0f571d6
.rar
安全防护辅助/安全防护辅助.exe
.exe windows:4 windows x86 arch:x86

fdbfec85672f73d2a4d49635454936d4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA
ExitProcess

user32

MessageBoxA

Sections

.text
Size: 264KB - Virtual size: 487KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 960KB - Virtual size: 958KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 28KB - Virtual size: 228KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.perplex
Size: 216KB - Virtual size: 216KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
安全防护辅助/请特别注意.txt