补丁工具[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

补丁工具.exe
Size

1.5MB
MD5

847bf62313b538e2eefd3a266eddb849
SHA1

9ee6d1dc73ba21922d16cd333e33b055b7cb00e4
SHA256

3fe67f48b021f42c027e6cf073349c9d304c289905eba66273b9038886c49f0b
SHA512

9bb990fdb7f7bd5ec630fba0d347b5bdc1f6419fc68ba2b8b5450ff3413870e069eeeefcc6ddbb2a50e17761203a016f17078cf0a98ed4fcea720b90cf296974
SSDEEP

24576:DnsJ39LyjbJkQFMhmC+6GD9rDDWTrcvHxGeYlT3uyDy:DnsHyjtk2MYC5GDlDIyGeI3ju

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
补丁工具.exe

Files

补丁工具.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 615KB - Virtual size: 614KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 831KB - Virtual size: 831KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ