E:\项目\轮胎行业资料整理\顺福昌\itMES_PDA\WA_PDA\obj\Debug\WA_PDA.pdb
Static task
static1
Behavioral task
behavioral1
Sample
WA_PDA2018-4-11.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
WA_PDA2018-4-11.dll
Resource
win10v2004-20240426-en
General
-
Target
WA_PDA2018-4-11.dll
-
Size
181KB
-
MD5
0ced92ea6f64f6c0e09edd94fabf6a5c
-
SHA1
8d1ac5e20f4f6bccf50182d93690f3e1deca4e1c
-
SHA256
eb78a1aa4992a5d13bba55e90cc2f533ce3f97e4d00ab0cfbbf2de600b5ead0d
-
SHA512
0fb837242c8c5189c7e28b0b2f84779ef4e409182d9b2ed43f2054786cb9bdff99298d0e9c4bb11aa4b7faf19e5d1bcc79b9900607791d07cf57803bb2098aac
-
SSDEEP
1536:s+0gQzI7T7gxDbOA6qwowfRcC/P7mNrS5+MRDZGvyolNWtjZSgSYThMdu:sLI7T7SgqwowfRcg6No+WcvFu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource WA_PDA2018-4-11.dll
Files
-
WA_PDA2018-4-11.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 179KB - Virtual size: 179KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 808B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ