D:\项目\CS\金融仿真实训平台\工程\bxyztSkin\obj\x86\Debug\bxyztSkin.pdb
Static task
static1
Behavioral task
behavioral1
Sample
bxyztSkin.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
bxyztSkin.dll
Resource
win10v2004-20240226-en
General
-
Target
bxyztSkin.dll
-
Size
370KB
-
MD5
d442135978c829577f829c99033fe7a1
-
SHA1
a6e68df230efa7b245598470313e2e99af5de1a0
-
SHA256
66fc0e0792a84605a53b78d659007d1d827091a4d6e8bfa871f634718a0d730e
-
SHA512
81b8ea80c98933f83e1c963f8931e9a28ce439a7881815e9ae8b8c1ba42a78c5a26df110218c74510e0d97c3c3ef85f3e65d1ebf0ee843bd70174c5da2cc8cc0
-
SSDEEP
3072:wCAlpG2jjaf6ojqRXkDMkQ5n8nv2DDYpUbwMNJG1/Zjk5xyhYO++d3KblDDD2US+:AlY2if6iMkPZUkMwp4lDDD9SfGsu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bxyztSkin.dll
Files
-
bxyztSkin.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 368KB - Virtual size: 368KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 968B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ