D:\交通局APP及時車位數網站\CarSpace\WindowsFormsApp1\obj\Release\SpaceInfo.pdb
Static task
static1
Behavioral task
behavioral1
Sample
SpaceInfo.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
SpaceInfo.exe
Resource
win10v2004-20240412-en
General
-
Target
SpaceInfo.exe
-
Size
11KB
-
MD5
9dbc8f4b5a2b9a8dfc4b04b2d4371cfb
-
SHA1
3d57e9e616365b4312744f03ce68746450bfb387
-
SHA256
5fbb9e411fa3a0899de205980351ca1d175ffb25b3eadfcc21ee9e78a3c20683
-
SHA512
f83e3d0637dfe94595711dfb856cf53a9d4d29ead9db89ab814269900a572a54f61a1a9bc11445e0e59209ee488b8c1addd0de75d0e12f946ac568d9f8694f4a
-
SSDEEP
192:3VPXz05OVprL2a0+2nXeFXJ9LL3LKLLfwOgh5pJXkj9fGDgT:3RBprL2a0nXc59LL3LKLjwvHkfmg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SpaceInfo.exe
Files
-
SpaceInfo.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ