D:\devroot\HIS系统\HIS系统\guigug-his\guigug-his-biz\Guigug.His.Health.AutoUpdater\obj\Release\AutoUpdater.pdb
Static task
static1
Behavioral task
behavioral1
Sample
AutoUpdater.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
AutoUpdater.exe
Resource
win10v2004-20240226-en
General
-
Target
AutoUpdater.exe
-
Size
214KB
-
MD5
df0c9bb30b19c32e9e9a6ba9414abdd4
-
SHA1
ecbb3a88dd70632301ab4d3ccc89a25e9adb3aed
-
SHA256
e1aabe24b6e7b589d9503067a3cf1ffcc7e2593ec2740786d11028663d98919b
-
SHA512
57bf8db79619401c79370161550c544beedd52eda4fd73b743f6841819655fc5098fabef057debbf07fe7e4e30538c26a980deda972fe43793d80a50d6543502
-
SSDEEP
1536:AwrFcWtH44Eci/Nh2m1TiwRyWOvFH37nvFH37JulXVppppp5p0pppppLH0aUHcz/:rrqWtH44Er1t1TiAcRklNxj9uTz80j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource AutoUpdater.exe
Files
-
AutoUpdater.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ