I:\WorkBench\NewServerSvn\Net\标书查看工具\一汽\trunk\技术标4.0\Code\obj\x86\Debug\TrueLore.标书查看.Main.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8703ebafc72c1a8ad23e96861703ce239158158a4e20915b074365b7e992f587.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8703ebafc72c1a8ad23e96861703ce239158158a4e20915b074365b7e992f587.exe
Resource
win10v2004-20240221-en
General
-
Target
8703ebafc72c1a8ad23e96861703ce239158158a4e20915b074365b7e992f587
-
Size
13KB
-
MD5
9d1fea740334ff58004d233c7a7a0da0
-
SHA1
c545a85247dfa4afeed44720236726c25b11a774
-
SHA256
8703ebafc72c1a8ad23e96861703ce239158158a4e20915b074365b7e992f587
-
SHA512
714fb8c2ea9a32f20d1cd4f2ad10c2b4f6e9a6a74a2cb48192c66da4af24b406bf62535772dcf9bf931842864b501a837bf317b93ac31dc8e82c33d9704eb170
-
SSDEEP
384:L9sNveay+9BIOgxcU33t3K54qvN1+s0B8gXBgJHGRfB:L/K54E+3qJ+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8703ebafc72c1a8ad23e96861703ce239158158a4e20915b074365b7e992f587
Files
-
8703ebafc72c1a8ad23e96861703ce239158158a4e20915b074365b7e992f587.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 864B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ