E:\dotnet\gaiban\新版服务程序\ConsoleApplication WEB\monitor\obj\x86\Release\monitor.pdb
Static task
static1
Behavioral task
behavioral1
Sample
c692ce290f27165cefe65598473b0cfd.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c692ce290f27165cefe65598473b0cfd.exe
Resource
win10v2004-20240226-en
General
-
Target
c692ce290f27165cefe65598473b0cfd
-
Size
6KB
-
MD5
c692ce290f27165cefe65598473b0cfd
-
SHA1
6700ecfc9933569fde16c36c5fab1b8f5fb5894b
-
SHA256
b7f1edfd20b6311da592497a5b7b0ea62d1f0b12c08d706758b77ae4d6cc9fb0
-
SHA512
65982c123cd84fa8c7658c2e39ff2ce7b1aff1ceade474eca100ca9127dccfc42384f11d6027099f0268a14af73b9f2a8f0f1a9996d674e7e12f8031115a8b08
-
SSDEEP
96:t3Gj50UWgBf3KDwDrg30QPPSMSmdxcu5MF8ymsMnzNt:Et0iBPKDwwEQP5xcuLz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c692ce290f27165cefe65598473b0cfd
Files
-
c692ce290f27165cefe65598473b0cfd.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ