aomei_partition_assistant_10[.]4[.]1_te[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aomei_partition_assistant_10.4.1_te.zip
Size

64.8MB
MD5

40a7bf0344d65497b7634dd749c0f84b
SHA1

833117829998b1cc62799b234ffdb4cf762d2430
SHA256

601572b5822fd4553bce680f48bf048f8109ee4a68a1e268f2f99b6fa7b734de
SHA512

55f0b496b7e6c94bbe327d50ed47a8dee47ca488c6bdddf5f8d74218b5d09d61fa654b24fd70bf6087b72011402901ad373715cc3e1c5549b6a7e8b5ff1a28f6
SSDEEP

786432:/ciyWIvipope0uLuu0mfaAC+idv8JtYLjowWjUt+o89O8YUy2p9criQK/nHKd9gt:zpb027Q8jIiw8Ft9pC+B/HKjgnhRB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/AOMEI Partition Assistant 10.4.1 TE.exe

Files

aomei_partition_assistant_10.4.1_te.zip
.zip
AOMEI Partition Assistant 10.4.1 TE.exe
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_About.txt
_Readme.txt
_Silent Install.cmd
_Unpack Portable.cmd
Описание.txt