f392a36a4efb70bd83f52815e1eda8a71a32a4f8ebc89361fc113a47366abcad | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f392a36a4efb70bd83f52815e1eda8a71a32a4f8ebc89361fc113a47366abcad
Size

2.1MB
MD5

340809c17ce0bb1912d3e299be07d35b
SHA1

cf69893a6ba2535eb8a421c3c44347173dde5770
SHA256

f392a36a4efb70bd83f52815e1eda8a71a32a4f8ebc89361fc113a47366abcad
SHA512

48bf1a4d9ea62baeda040a2faaae2819c55460ffbeef2087127d60e99e3b017b5032c1e8c371f4c8f445e85e6578d0e80ed2cb23479204b80a44a3c9709c112e
SSDEEP

49152:fWx7Ih4Aq8VqQNW6YXcqNs2nF/ViTyFwu06H:edIh4AjVfGXcqrF/ViTy+u04

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f392a36a4efb70bd83f52815e1eda8a71a32a4f8ebc89361fc113a47366abcad

Files

f392a36a4efb70bd83f52815e1eda8a71a32a4f8ebc89361fc113a47366abcad
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 309KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 440KB - Virtual size: 444KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 209B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
多判断图色全屏封包.pyc