C:\工作\标准\其他\铭创天线\branch\1.0\SDHS.ETCKit\SDHS.ETCKit\obj\Debug\SDHS.ETCKit.pdb
Static task
static1
Behavioral task
behavioral1
Sample
SDHS.ETCKit.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
SDHS.ETCKit.dll
Resource
win10v2004-20240508-en
General
-
Target
SDHS.ETCKit.dll
-
Size
83KB
-
MD5
c0e474e3e022ca30ba55a3695d72fcf0
-
SHA1
6a0bfb5716833ec4152c4af278d6f2b78bed583e
-
SHA256
b2baf407da3353ccb70501488cfb66e571eb5ede897bf15378bdcc3bc2d0f7ba
-
SHA512
84868d55a3a136a3a540f51bed4cd72321d86171cbf2fb336be6ab9f963d5429d80de8d2a055385ab563f333c4fe6e8179a17a8d756338310272ccf201b47503
-
SSDEEP
1536:RdYlxy20H12CgSFTEDIfOuciiB2MKoYe515vm5mXU:R+30VxYcfOuciLMKgTomE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SDHS.ETCKit.dll
Files
-
SDHS.ETCKit.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 81KB - Virtual size: 81KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 936B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ