网络修复工具[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

网络修复工具.exe
Size

6.9MB
MD5

7b44eea62d54193ee8b4fa01226f9637
SHA1

c51b41b47885c802431b63d9f5f639a737b3e433
SHA256

ef2288e8dfce57b2399ec4ba33b12116295019ad5656a2be376ec093aa88422a
SHA512

79dfa2734bcd62e2e1dc50ab9fca6349d7b25cc4939ac2f437482a260d44ce7b67e4b8715f9cee2105bdcc00f7aed537aa6520e2ef9f379994ea53fad0c94e69
SSDEEP

196608:S4Z5OC9e6aMKRS3JhigIy200uU+x1kpBr1:nOC9mKDigIy2x/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
网络修复工具.exe

Files

网络修复工具.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\UC#++\xiufu\obj\Debug\网络修复工具.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.svmp0
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.svmp1
Size: 6.8MB - Virtual size: 6.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ