9056c9a5e094792e3ed2c7f4aa818e98e2f13d11680081916ac448c6b2b949b2 | Triage

Sharing

General

Target

9056c9a5e094792e3ed2c7f4aa818e98e2f13d11680081916ac448c6b2b949b2
Size

6.9MB
MD5

ff3836993323aa9b5c71fa2c1d0f7610
SHA1

834509c7ad31dc59e67b8f381b1ec7c1fccb1f88
SHA256

9056c9a5e094792e3ed2c7f4aa818e98e2f13d11680081916ac448c6b2b949b2
SHA512

5972748f7273e90e90726f55752b4a18a585b36a108ca4bf41728e587e441271e93df944893caf02efe8c1a6c39d88ddefba8e7385db979f88645d8e5ae34531
SSDEEP

98304:UYTTFnmwSMcUNx/2zbsrhoHag+ncL0zLSLhuCu0X1VYTTFnmwSMcUNx/2zbsrhoB:UYGU28hoDFNXvYGU28hoQk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9056c9a5e094792e3ed2c7f4aa818e98e2f13d11680081916ac448c6b2b949b2

Files

9056c9a5e094792e3ed2c7f4aa818e98e2f13d11680081916ac448c6b2b949b2
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\OEM\JM\高端版\Pulsar定制\Debug\OemDrv.pdb

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 356KB - Virtual size: 355KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 187KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.enigma1
Size: 4.4MB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 300KB - Virtual size: 300KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE