创建所有数据更新包[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

创建所有数据更新包.exe
Size

28KB
MD5

f7df512a045767ca17a1bc295e11257e
SHA1

b89b4f79b943cc5c6450368cea3c7065ca31dcc4
SHA256

e4709580b7a3e54199cdfcdfaf91424945186014f20139921ea2e99ee3a01ea4
SHA512

469f15fe0ab4b4c98507144f8b145e24eeb58bafac1077fb5e2930667497342e4eddf86dbbbc9f44f4da05053d3178b25f920b85873f29b373d32b832cdce7cb
SSDEEP

384:39cT97VP3WBZmOqZOTJpvwfwq6uawq6uE0qRpHY7MJHMpYiOWc+5hgq5YZ6Jh0+G:ajfBOLqRpHKMdDiOWrZa/HDrT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
创建所有数据更新包.exe

Files

创建所有数据更新包.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\工作\PDA宝姿\PortalWebPda\CreateAllData\obj\Debug\创建所有数据更新包.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ