D:\项目——五粮液车辆管理\五粮液智能交通后台管理系统\TrafficManage\obj\Debug\TrafficManage.pdb
Static task
static1
Behavioral task
behavioral1
Sample
TrafficManage1127.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
TrafficManage1127.dll
Resource
win10v2004-20240426-en
General
-
Target
TrafficManage1127.dll
-
Size
83KB
-
MD5
8fca3f8dcb219f44474fc557ead4a389
-
SHA1
f739693fe2deb03e2b89366a1610b96b493c5d0e
-
SHA256
444a877b770777c78fc59c7c83418344871b5e1f40a9d651e63cbbb5370fb39e
-
SHA512
904374ba3610ca0c8807d605a955febf430d3fd554a57bc098d7c09908575dc7ab0a9b106407da3738a0347e796c676e78ba1a171f016e16a08cb5f178cb4e25
-
SSDEEP
768:HhRepElP8z0jJ9b8JeytJ5rpimitIfHxZEZ+u8owEAADWgVFhriawTBgbuMIKyzH:HPepElP8z0QJVpizIHbW+MxWyONL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource TrafficManage1127.dll
Files
-
TrafficManage1127.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 81KB - Virtual size: 81KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ