daaf717be329a96852eae7de855cd7c783ea3baaa50d7e099599572dd2d001fd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

daaf717be329a96852eae7de855cd7c783ea3baaa50d7e099599572dd2d001fd
Size

72KB
MD5

ed5485604f7347e6ac93e01ac6a2f01c
SHA1

3f355ce5692fcbfa99c1cb2ddc4631f7a8a1117a
SHA256

daaf717be329a96852eae7de855cd7c783ea3baaa50d7e099599572dd2d001fd
SHA512

bd99c396ed21a4185acd70f37cd9bee640e31d099f255b609a74fcecae33b9f3996a9b7259c18e6239e1bfd1978118ee08c6f365feff589ea96623b115138991
SSDEEP

1536:DywTcFniaNwuGFTcpYbZXRjFYivdgLRjF:OwTcFniaNwuGFTcp2RjFYivmLRjF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
daaf717be329a96852eae7de855cd7c783ea3baaa50d7e099599572dd2d001fd

Files

daaf717be329a96852eae7de855cd7c783ea3baaa50d7e099599572dd2d001fd
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\XYNBNBUser\Documents\Visual Studio 2005\Projects\冻结查询器\冻结查询器\obj\Debug\飞豹QQ冻结查询器.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ