E:\项目\轮胎行业资料整理\顺福昌\itMES_PDA\CommFun\obj\Debug\CommFun.pdb
Static task
static1
Behavioral task
behavioral1
Sample
CommFun.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
CommFun.dll
Resource
win10v2004-20240508-en
General
-
Target
CommFun.dll
-
Size
18KB
-
MD5
057280d73ed87a4ebc5ca7d0fcc541e7
-
SHA1
f58450de45eade1f7a6a22aac635d0f14ac2c12c
-
SHA256
55f055e6d2d22699bd98a0fca4bfbfa53a0554f387396e0640aa1e47804271be
-
SHA512
b615d7aa2c4fcc431ab8f5e7d7baefedb3126ed3cac84c9b60ed2b7fdf975e661a1ab99377fc4fd4f5c6ba2dcc711ce15d0933247d76bcf1f476f0f7f696521f
-
SSDEEP
384:6PQtQW1WCBzQDBWjzgy0LD6h9jrV8PlnpO/CFtsV:6PaQDBugy0LDuFgsTV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource CommFun.dll
Files
-
CommFun.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 808B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ