E:\项目\轮胎行业资料整理\顺福昌\itMES_PDA\BUD_PDA\obj\Debug\BUD_PDA.pdb
Static task
static1
Behavioral task
behavioral1
Sample
BUD_PDA.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
BUD_PDA.dll
Resource
win10v2004-20240508-en
General
-
Target
BUD_PDA.dll
-
Size
212KB
-
MD5
f49e469e3e2dccfe384772a330b588e8
-
SHA1
42a18e08524f49ad70c86209815d87b38f88278e
-
SHA256
4a520b76dd16d8cefabea9a23143afd849e0479b796196a8457841b2117c674f
-
SHA512
ad81149d54392b9b750bdb6ecc0d2d80b48b0ba18221c73eaeb04ffb394f34aac79d6042024311501f8f406196562ba8dd90ba5aa8ce3ca8b244acd5d0b01c31
-
SSDEEP
1536:HFwq1Atim1iS7dBXuhwqwOAFp25yUm4n7OD6ce0CX93T4WNkZJ+OKdZxJfDtIhIT:HFD1wim1iSJ4hwzvp2hmVGBXNFMwX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource BUD_PDA.dll
Files
-
BUD_PDA.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 210KB - Virtual size: 210KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 760B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ