ExpoShanghaiWeb3DPlayer_en[.]exe | Triage

Resubmissions

25/04/2024, 21:26

240425-1ahjrsfb98 7

25/04/2024, 21:22

240425-z78lsafb63 7

Sharing

Copy URL Twitter E-mail

General

Target

ExpoShanghaiWeb3DPlayer_en.exe
Size

8.3MB
MD5

7af4e4d5521a587c3972cf5371f2e301
SHA1

4f14a8c67606ae65f87f56789cac2db428de2164
SHA256

47a141d146af46ef404400798aa582490d815a299f4ca9158dc89f094ebc6407
SHA512

b1f56c7d618305d380a39a34f98268ae4068968c7238d3ef579b2d0752f9e89cfb951588ceac7767e17a9458258b915bc4ced8a607f1d8e7d477e7a31c4204a8
SSDEEP

196608:HU8FtYl2r+hsmoFY/dfM98a+JkCU65s6mtZMdjzm:H/XUNum7GqaAkCU657I0ja

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ExpoShanghaiWeb3DPlayer_en.exe

Files

ExpoShanghaiWeb3DPlayer_en.exe
.exe windows:1 windows x86 arch:x86

Password: haibao

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ