D:\KFPA_TFS\KFPA 통합 솔루션 v1.0\Main\Source\Kfpa_Solution\Win\Projects\DM\Kfpa.Win.DM\obj\Debug\Kfpa.Win.DM.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ce153e95a9baf106ee1c69ec066e13de73cd7e6c76bc0d7d3bbee2a4f4e23bb1.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ce153e95a9baf106ee1c69ec066e13de73cd7e6c76bc0d7d3bbee2a4f4e23bb1.dll
Resource
win10v2004-20240226-en
General
-
Target
ce153e95a9baf106ee1c69ec066e13de73cd7e6c76bc0d7d3bbee2a4f4e23bb1
-
Size
23KB
-
MD5
c19599acd0fdae23378fd1b2fc6da1c2
-
SHA1
46ebff895e4afef7210a0e06841cc22a33f39dc6
-
SHA256
ce153e95a9baf106ee1c69ec066e13de73cd7e6c76bc0d7d3bbee2a4f4e23bb1
-
SHA512
a1f0b34f5fe5987b71736585b9de58ce2a664d6d8b0df42639290590cc6d21759db7add4c63c0b8caa8fac8637e6906a637cfc7daf37666eda0e7679a33f1a6b
-
SSDEEP
192:W/7UhTdbW2t/1Uj3zugzNQZVTnlYJL/eZU1ONIDLRqgCyuZAwSmQ:W/AhTdbW2t/eLTzNQ2qJ+LRip
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce153e95a9baf106ee1c69ec066e13de73cd7e6c76bc0d7d3bbee2a4f4e23bb1
Files
-
ce153e95a9baf106ee1c69ec066e13de73cd7e6c76bc0d7d3bbee2a4f4e23bb1.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ