E:\工作\伯俊数据同步\PushService(旧ORACLE驱动)\OraDal\obj\Debug\OraDal.pdb
Static task
static1
Behavioral task
behavioral1
Sample
OraDal.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
OraDal.dll
Resource
win10v2004-20240426-en
General
-
Target
OraDal.dll
-
Size
19KB
-
MD5
0854f893c54389ca7b638cf2864f277c
-
SHA1
c91159f767a359ebb95ff9317f4478bc001f4d7b
-
SHA256
ccd64d39969a210da34bf0bf4ceac594fc41f3777354eae3c74f7db65be14eb6
-
SHA512
409c64d27dfd9356b211f5e4c219839c4c89fd80ceee9815e6b7b8fc15e2688d6d80616cc1cd55f164ec41269d9a2cd64f8413d17c1628dab50b509ac9f88282
-
SSDEEP
384:1VC+0t5X/iAL4/w/gDHingwbdAZ5ZBSpTgK7sVR7QFP7J3Nwfe3AB0KWn:zo5KAEIYrYgwbdO5ZBvfkhdNq5ar
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource OraDal.dll
Files
-
OraDal.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 832B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ