7d2081617d0dd777380bc2fedb3690e072dedba538d50474db9dec60d1cf93b5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7d2081617d0dd777380bc2fedb3690e072dedba538d50474db9dec60d1cf93b5
Size

1.3MB
MD5

0f6484d87537049fbc1ff6cb5f9eae7a
SHA1

49f33662dee89563382524091d628d75c151e0f3
SHA256

7d2081617d0dd777380bc2fedb3690e072dedba538d50474db9dec60d1cf93b5
SHA512

e89bd4e2f93741aa3475990805281944f7ddc3c410388dd101cbcc7e19d705791d55c0d0f5b1de442cc73f8dcb7646ba378bc13a782a22e08f398e58c3666f3b
SSDEEP

24576:t4ATi/T6B133JZvVsyQuCxFJjOVc2lgX7PHycRo9w/UNw++6:tpTnnapOS2ls1Kwj++6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Multisim【打开安装】.exe

Files

7d2081617d0dd777380bc2fedb3690e072dedba538d50474db9dec60d1cf93b5
.zip
Multisim【打开安装】.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\cpan\soft -3\SoftwareInstallerAE\obj\Debug\mu1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
如打不开点这里.url
.url
有问题点我.url
.url