3d76502a952f3fdc6030e10a882df06f4ea382f775be9d286afe76350b3d10c2

General

Target
3d76502a952f3fdc6030e10a882df06f4ea382f775be9d286afe76350b3d10c2
Size 263KB
Sample261102-kerega1zhs
SHA256 3d76502a952f3fdc6030e10a882df06f4ea382f775be9d286afe76350b3d10c2
MD5 f6b4768bee3cb8512936aee26ee93bf3
SHA1 7e6419cfa4034cdf8690e8a7fcc3a2c7fe1e52b8
SHA512 0ee2b9ff7038b371af4f67d22ba77b626d2b874fec0a8af708f61a6617414addf4f5ff6801df7d560715181f6d7164534ec61f7ac76c26989027d339abb39243
SSDEEP 6144:3v8u4AL1zSBU+PAelyG/FjCvUxS21FpTm:3v2AZzSyqA2yG/FWvUB1zm
TLSH
T10D44237D26F008813BE7C1C7905C193B99E7A2619EB928BC544E8891F3F76F1D15392B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

ConfuserEx .NET packer 1 IoCs

Detects ConfuserEx .NET packer.

resource	yara_rule
static1/unpack001/LAN快传_v1.6.3_Free.exe	ConfuserEx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/LAN快传_v1.6.3_Free.exe

File Explorer

3d76502a952f3fdc6030e10a882df06f4ea382f775be9d286afe76350b3d10c2

.zip 263KB
LAN快传_v1.6.3_Free.exe

.exe 577KB
使用说明.txt

24KB

3d76502a952f3fdc6030e10a882df06f4ea382f775be9d286afe76350b3d10c2

SHA256 3d76502a952f3fdc6030e10a882df06f4ea382f775be9d286afe76350b3d10c2
MD5 f6b4768bee3cb8512936aee26ee93bf3
SHA1 7e6419cfa4034cdf8690e8a7fcc3a2c7fe1e52b8
SHA512 0ee2b9ff7038b371af4f67d22ba77b626d2b874fec0a8af708f61a6617414addf4f5ff6801df7d560715181f6d7164534ec61f7ac76c26989027d339abb39243
SSDEEP 6144:3v8u4AL1zSBU+PAelyG/FjCvUxS21FpTm:3v2AZzSyqA2yG/FWvUB1zm
TLSH
T10D44237D26F008813BE7C1C7905C193B99E7A2619EB928BC544E8891F3F76F1D15392B
MD5 SHA1 SHA512 SSDEEP TLSH

LAN快传_v1.6.3_Free.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 c1cda7fad7c4bbf6926e1a9fcc46c8395f0f2bc9bd83b27fcb7840c52a9b107e
MD5 939232248b68e7656a8d3daa7bedd6c3
SHA1 0c551a8454f6ee6d980f126e48a3ea50086dc5fd
SHA512 35fc3e19f83c851273d22c036c98f89c0faa6a501916b0556e696ab0d908d4046b655950ec2f1637cd00a60de3bbffc8de3587c341f4ea3c98eff0d52960c6cf
SSDEEP 12288:eFjh56XY694JUjrY3gogBVkuOBXZ7nd7BjUDDvX6UlZD+BbjhxD:eph56XY694JUjrYwogBVku+Bb1x
TLSH
T18AC4958D37B5B59FC757CC720EF47D789518A57A27079203B5330AA88F0DA8E9E082B5
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

ConfuserEx .NET packer

Detects ConfuserEx .NET packer.
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

310494

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

3d76502a952f3fdc6030e10a882df06f4ea382f775be9d286afe76350b3d10c2

LAN快传_v1.6.3_Free.exe

mscoree

dotnet

使用说明.txt

Sharing

General

Malware Config

Signatures

File Explorer

3d76502a952f3fdc6030e10a882df06f4ea382f775be9d286afe76350b3d10c2

LAN快传_v1.6.3_Free.exe

mscoree

dotnet

使用说明.txt