12579a15b99d76f8dea169cff45fde1c1b8d695eb5b9b5d69fd9a2a70a7e558a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12579a15b99d76f8dea169cff45fde1c1b8d695eb5b9b5d69fd9a2a70a7e558a
Size

2.3MB
MD5

62b61fb07e86ebbe37cda22c0b6d1532
SHA1

c3acdb01f12ae3061663e6861696ba5d7b10b938
SHA256

12579a15b99d76f8dea169cff45fde1c1b8d695eb5b9b5d69fd9a2a70a7e558a
SHA512

1c902749ed5d6ccd757904309fb0485d6b25c2dcbcf72bcc8fd6de4421ba992ec93b2962941808c09504b96daff94d365531690fee2e30fb10cbc6bc664a03ae
SSDEEP

6144:DozzoFbBp8Ahuvieg9mdFDdcf5+FDdcf5:E0x2cf5wcf5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12579a15b99d76f8dea169cff45fde1c1b8d695eb5b9b5d69fd9a2a70a7e558a

Files

12579a15b99d76f8dea169cff45fde1c1b8d695eb5b9b5d69fd9a2a70a7e558a
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\wjf\华为\KM_USB_mode_ota_pc\ota_app\obj\x86\Release\USB_OTA.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ