F:\MoFang\Ranking\Ranking.WCFEntity\obj\Debug\Ranking.WCFEntity.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Ranking.WCFEntity.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Ranking.WCFEntity.dll
Resource
win10v2004-20240508-en
General
-
Target
Ranking.WCFEntity.dll
-
Size
6KB
-
MD5
baed368d9375968d0ad7fefbc2ba40f1
-
SHA1
a473db4f368622825c47b7f9ce0fc6865960a8f4
-
SHA256
38d46ef71082b3e208c7787ebc59615457d0ed2ba7ce828146a34a37b1eed7f7
-
SHA512
0c4c91b1f358059ccb29b1ef2cf7e2dd2408adab14a9651ecf055d2885745f186fcaa0ec345d7d65c1f5b847f5a529b0786d578cca756bbe0fb7cc7780b77948
-
SSDEEP
96:btuYpznzaqBm1inGxJws9tjjjjj34cPB0g093ir9FDOZ3wfWeDLDCn:puszOIn2pCg093W9YZAfWeXDCn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Ranking.WCFEntity.dll
Files
-
Ranking.WCFEntity.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 988B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ