E:\项目\轮胎行业资料整理\顺福昌\福麦斯全钢\程序\itMES_PDA\BUD_PDA\obj\Debug\BUD_PDA.pdb
Static task
static1
Behavioral task
behavioral1
Sample
BUD_PDA2021-11-20.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
BUD_PDA2021-11-20.dll
Resource
win10v2004-20240426-en
General
-
Target
BUD_PDA2021-11-20.dll
-
Size
240KB
-
MD5
faf285b848de8dab76812bce0d40a186
-
SHA1
64b8d2b387a9e986fe728c00e7f6a06c06836124
-
SHA256
0921fffb7f661a2908e81151b7c2c87470aaea590a66e78087c48c6998da4575
-
SHA512
94bc469c0802ac9cf14d95b4869279d33d507a29be511b00931ab97a7c0c1bcfe7bd241f059236efea99e03e90499d7f1f37972c95e31714431df3ea0b9822e8
-
SSDEEP
3072:xrHJ7LLZjnFEOiqVK/JFY9EyiQqfXg7isELw:xrHJPLZjnFEOiqVUY9EyiQe2E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource BUD_PDA2021-11-20.dll
Files
-
BUD_PDA2021-11-20.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 238KB - Virtual size: 237KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 760B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ