C:\Users\Rincol\source\repos\OneKey-PSGO\OneKey-PSGO\obj\Debug\OneKey-PSGO.pdb
Static task
static1
Behavioral task
behavioral1
Sample
OneKey-PSGO.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
OneKey-PSGO.exe
Resource
win10v2004-20240426-en
General
-
Target
OneKey-PSGO.exe
-
Size
94KB
-
MD5
72871be73c2644d743fab923121a3904
-
SHA1
f32c8894f0610a9776e6392f0061f784540efc65
-
SHA256
40b12ffb3901bf967c5faf6017acb3ee45067e70d9b7983776d45f0d93f21f9c
-
SHA512
350bc0c558320c26dca035e2f75147722c63702cc75a4fdc4f5c4da33c18246ebb53346ecc98ba831509c2b3b2d934560a13ade3327d71ca0bb670ea446c0e74
-
SSDEEP
1536:M/+Fmg6bE5cR7mkjA6h4BSCVanzZTN/ZxVWEFbuL8yVEqR4wvcmgl:MGa28XAJanzT/ZxUEMoEEjwvc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource OneKey-PSGO.exe
Files
-
OneKey-PSGO.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ