EaseUS_Partition_Master_v18[.]x_Fix[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

EaseUS_Partition_Master_v18.x_Fix.rar
Size

1.1MB
MD5

befa33d0dcf4e2801d08c04f38d926fb
SHA1

f1916e52b6cc2311121d461755e2de8faef699a8
SHA256

a5e26415ddc5b0d7f178faa2c95d67de1483bd5444ac3cfe3ff915cf776818f9
SHA512

79b056ffc6f4d4ac132add636054c22e2c3a5cd355266c4c39aa065bbc652ae572e43250aa90fbdc9c14226d43c6df2fe5e25f7a229a26034627cd95a1f43147
SSDEEP

24576:x6MCdPG4or73FRONTVpG/4Ztijt6W50oRFrx8jPnyQ:YK4o/36TVAgZtMRRJxYPyQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/EPM v14 Activator v1.1 - De!.exe

Files

EaseUS_Partition_Master_v18.x_Fix.rar
.rar
EPM v14 Activator v1.1 - De!.exe
.exe windows:5 windows x86 arch:x86

9868070df9cabf86070839c17858f024

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

user32

GetClassInfoW

advapi32

RegSaveKeyW

comctl32

ImageList_GetImageInfo

Sections

.didata
Size: - Virtual size: 3.2MB

IMAGE_SCN_MEM_READ

.ctors
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 394KB - Virtual size: 750KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 94KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Professional_FLU.reg
Server_FLU.reg
Technician_FLU.reg
Unlimited_FLU.reg