E:\项目\轮胎行业资料整理\顺福昌\福麦斯全钢\程序\itMES_PDA\QA_PDA\obj\Debug\QA_PDA.pdb
Static task
static1
Behavioral task
behavioral1
Sample
QA_PDA2021-4-7.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
QA_PDA2021-4-7.dll
Resource
win10v2004-20240508-en
General
-
Target
QA_PDA2021-4-7.dll
-
Size
213KB
-
MD5
19925dc4ad1e081483bcea40249ff8f0
-
SHA1
20eb3fb8a8b647198ea51fc85c804496259eff45
-
SHA256
55809d0d816807e089b2a97f2dc1866b7922cad6ac3d30aae5c584134645768c
-
SHA512
774f7a91d923b72839970ba666f4b2b7107b1c5da40d340a4610f3389b4cb1b0a5a1884ed2ea5a3434cb3a8cab65ee4b7f66db2b6e82547cefd6b0a8f806c4ba
-
SSDEEP
3072:qrlg4EhnR5e+PVEO5goSz9ajczI0FBwk:yxEAIE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource QA_PDA2021-4-7.dll
Files
-
QA_PDA2021-4-7.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 211KB - Virtual size: 211KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 760B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ