D:\健康卡开发资料(神思旭辉)\源码\发卡\省立医院\AHSLYYJKK\obj\x86\Debug\AHSLYYJKK.pdb
Static task
static1
Behavioral task
behavioral1
Sample
256f3844c7473e1f70375fb810b04cbf3b6708ec9719681e7d9ca2629fe5562b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
256f3844c7473e1f70375fb810b04cbf3b6708ec9719681e7d9ca2629fe5562b.exe
Resource
win10v2004-20240226-en
General
-
Target
256f3844c7473e1f70375fb810b04cbf3b6708ec9719681e7d9ca2629fe5562b
-
Size
115KB
-
MD5
7f299a9c418b568650767d08f66587f1
-
SHA1
1beadec02c3bf79782df22ee86c404b997cfff2e
-
SHA256
256f3844c7473e1f70375fb810b04cbf3b6708ec9719681e7d9ca2629fe5562b
-
SHA512
5bfe2d3d3d1a9a6544c0a3a847b6dafdb0e31c51cedaaf38394269d505f588d1086e32e67f1293339664b9962649b2c12d677d8e52512fd6c64dd826c4ec8a3e
-
SSDEEP
3072:bHXojBMcBG83f0J+Ji0XIJwSlVTUzFA9cl5kiAm:bHXojBMcBG83cJ6NId6zU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 256f3844c7473e1f70375fb810b04cbf3b6708ec9719681e7d9ca2629fe5562b
Files
-
256f3844c7473e1f70375fb810b04cbf3b6708ec9719681e7d9ca2629fe5562b.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ