星辰软件 [.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

星辰软件 .exe
Size

5.5MB
MD5

2504a5c44f388b2223028868c9e9e0c4
SHA1

432e2ca7d4425d6569772d68981caef496839727
SHA256

dbed94d35345d31c54a238212acd6adfc50a05f1fdcc15d7046df20b5880a6c2
SHA512

2291569c65d148692d98cb4860344242bd1b8d9859dee3d58efce5d5b3f081858d31c76d46a13a1b6865813e58bd7dc07a82f6edf5a2f5d43ffaa23d274add55
SSDEEP

98304:40XshRgfUc0AEaOSnun6LisbHscDUs4Hi0f+KDiMKzv6Cb6fDI1hiHTsp6TGeNb5:eZ16JbHsWmfriM2vzOuhqK/d+/7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
星辰软件 .exe

Files

星辰软件 .exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4KB - Virtual size: 4.8MB

IMAGE_SCN_MEM_READ

VProtect
Size: 356KB - Virtual size: 356KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

VProtect
Size: 5.1MB - Virtual size: 5.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

VProtect
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_MEM_READ

VProtect
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_MEM_READ