H:\外挂所有文件\外挂\网游外挂\苍天\苍天\obj\Debug\苍天.pdb
Static task
static1
Behavioral task
behavioral1
Sample
7db3c96d7476514cebcb3d01c5121ce5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7db3c96d7476514cebcb3d01c5121ce5.exe
Resource
win10v2004-20231215-en
General
-
Target
7db3c96d7476514cebcb3d01c5121ce5
-
Size
172KB
-
MD5
7db3c96d7476514cebcb3d01c5121ce5
-
SHA1
cddd2efd2e2f076227782e2c36f3f33ce3b603b7
-
SHA256
f1a2610370ef074702c3e0e71c8f1bd260c582a4c7dfff28a9ef36432d48757e
-
SHA512
62ff8f0a072f745e4163a26662ef2344e6ea3ab22daf36d645c28ab4a2d18e5743f1e1ae41869c361dec6f1fcbe4982c0ea9686dc5a264e4884406cc267ff5a7
-
SSDEEP
3072:h9v/XXXXXXXXXm0JGlPIEb7VPjw/CdjjCAY:h9/XXXXXXXXXm0SgUw2WN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7db3c96d7476514cebcb3d01c5121ce5
Files
-
7db3c96d7476514cebcb3d01c5121ce5.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 160KB - Virtual size: 159KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 728B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ