F:\蓝泡公司项目网站\SteamSpeed代码\C#.NET4.8SteamSpeed安装包代码 - 副本\obj\Release\SteamSpeedsetup.pdb
Static task
static1
Behavioral task
behavioral1
Sample
3be8efadfd467ca9cf189795677d961ab0a0c31a6ff4951d503e25566f482a06.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
3be8efadfd467ca9cf189795677d961ab0a0c31a6ff4951d503e25566f482a06.exe
Resource
win10v2004-20240508-en
General
-
Target
3be8efadfd467ca9cf189795677d961ab0a0c31a6ff4951d503e25566f482a06
-
Size
258KB
-
MD5
0bd3d9ea70e2371a74e233c04d1f5a75
-
SHA1
ce559b73a8818ed143258c862f36bb19c6a20232
-
SHA256
3be8efadfd467ca9cf189795677d961ab0a0c31a6ff4951d503e25566f482a06
-
SHA512
4f63aeef3e852cb6250e3f97e61db3c90ceba97f6e564f7b7aab66217d4bd489aa9cd718a343a800ed8078f5a9f053915f09c778b772583c714ae87960506f79
-
SSDEEP
3072:/QU9THbqoEnWnNZssPMN2ZKOR45qj86l0T9Lro0qubPNbgsPMN2ZpORst9lWJ:h7REnONZssPZR459TNyuTNbgsPWRstn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3be8efadfd467ca9cf189795677d961ab0a0c31a6ff4951d503e25566f482a06
Files
-
3be8efadfd467ca9cf189795677d961ab0a0c31a6ff4951d503e25566f482a06.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 201KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ