D:\wangjx\project\.net\HGSOMS\Client\LIMS.Client.SystemManage\obj\Debug\LIMS.Client.SystemManage.pdb
Static task
static1
Behavioral task
behavioral1
Sample
LIMS.Client.SystemManage.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
LIMS.Client.SystemManage.dll
Resource
win10v2004-20240508-en
General
-
Target
LIMS.Client.SystemManage.dll
-
Size
4.3MB
-
MD5
df9a9d93f4db10e977f2a296afb049bb
-
SHA1
3ca7edb868daf2372be28da1910a29b257e0109d
-
SHA256
e25b4a9cb562910f679c66b2f52bce736027412cf2ef19c31b88a2367fb7a2f7
-
SHA512
662563ae648bf523d30df866eb32c19d88be8329941a0b55f4e1bc7cc98b102c82f8db5beb837152be26f3d8d6bad34f3a482773ba1f4c5d7699cca47e424cfa
-
SSDEEP
49152:PEUbVXZqEGsEDhSKKbNyrXuMGObabeTd:8YZqPnDwKq4r+M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource LIMS.Client.SystemManage.dll
Files
-
LIMS.Client.SystemManage.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ