Static task
static1
Behavioral task
behavioral1
Sample
管控测试程序.exe
Resource
win7-20230712-en
General
-
Target
管控测试程序.exe
-
Size
27KB
-
MD5
a64298bd0554e06b15340bac1dc76042
-
SHA1
e9b72d36d3a874d2f6cde5afa0e3d51efb111390
-
SHA256
9a5eec1281da8d0b4bf1b493a56815922ca1d6d30f024093f89de55d0ccaf90d
-
SHA512
c242fc0e0305e908e6d162c976316e9c9141024e192d78f66e7d10f3643f92d5ac57be22f24cc197afef34d4d1936e7fd5dcb9216a1de51ac40cb7ed349d8066
-
SSDEEP
768:dc7JOv1Hd36dLtT/TWhUXZdHF2Zb9bR4mXsqpyyYGZJsbfW5RQepOwYcER5:dsOv1Hd36dLtT/TWhUXZdHF2r94Jqpyb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 管控测试程序.exe
Files
-
管控测试程序.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ