D:\开发\2023年5月26日Squad相关\Squad自动进服\SquadStartAndAutoJoinServer\RunCheckAndUpVersion\obj\Debug\RunCheckAndUpVersion.pdb
Static task
static1
Behavioral task
behavioral1
Sample
RunCheckAndUpVersion.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
RunCheckAndUpVersion.exe
Resource
win10v2004-20240221-en
General
-
Target
RunCheckAndUpVersion.exe
-
Size
12KB
-
MD5
470acba3b4d9d2e80c3feb2c50963d87
-
SHA1
7393b215a8fb42a611807c2f1f938fb08e4f0520
-
SHA256
1eafe91634ba8838cc2e79e36338ec95dd50dd3124b0f5fc0c59d740dc69caed
-
SHA512
e0f84f1600255018e5040588769e5917f258f5d674b2e108a5765817668f586ccde23b5f62cb3442f12b534d6ade5a4fa42ec752bbd500a50a33303c303a91b0
-
SSDEEP
192:GpcqsAgBDZCB2HpLCdX/6ZCJdqDXPoPTL6z1+3yUFIQS:GpcqsjHCBYxCdXCZCJEDXPoPnmIiUFIQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource RunCheckAndUpVersion.exe
Files
-
RunCheckAndUpVersion.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ