H:\Work\SVN\NET\Common\sz_tools1\common\TrueLore.CA.HttpServer\筑龙驱动服务检测\检测项\TrueLore.JCX.签章_可信电子_山西国资\obj\Release\TrueLore.JCX.签章_可信电子_山西国资.pdb
Static task
static1
Behavioral task
behavioral1
Sample
74c952b44ddc74896486c689ce94b969105e0009680e573b5232a8ace18b1b69.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
74c952b44ddc74896486c689ce94b969105e0009680e573b5232a8ace18b1b69.dll
Resource
win10v2004-20240508-en
General
-
Target
74c952b44ddc74896486c689ce94b969105e0009680e573b5232a8ace18b1b69
-
Size
5KB
-
MD5
afa9058f02356f9c1ea22dbaa07341c9
-
SHA1
962be0a2a0bc84e9835cde336b209d26adb71cd9
-
SHA256
74c952b44ddc74896486c689ce94b969105e0009680e573b5232a8ace18b1b69
-
SHA512
a30dd8d0fef65096e6df8ce96a06cff0972a902d8b877dfa25a74982d25268c22438aba30110f2a623c0ac79621d0fd02b3255d21f15175fc4bded9de2f30478
-
SSDEEP
96:Hw4l3WX7+k/aKJyRadzwZsxWSN/gV/Unump5c+0W2:HlGak/5RdvaojC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 74c952b44ddc74896486c689ce94b969105e0009680e573b5232a8ace18b1b69
Files
-
74c952b44ddc74896486c689ce94b969105e0009680e573b5232a8ace18b1b69.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1016B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ