\\192.168.1.218\web\周成染色\bscanService\bscanService\obj\Release\bscanService.pdb
Static task
static1
Behavioral task
behavioral1
Sample
bscanService.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
bscanService.dll
Resource
win10v2004-20240508-en
General
-
Target
bscanService.dll
-
Size
12KB
-
MD5
84c04f6730bf64495fa303d473e02ceb
-
SHA1
224e0bafb5dd27e8199c4cedf909dffeb890773f
-
SHA256
fef9d37c554b1b206d3f939dfa4738939fc703746b07eef111f9c3d1b2aaa89b
-
SHA512
3770ae1c931a858fda47b0b5e07e19575d8a1b7f81f989d006b1e28a2359fe3a768d44c2b40bee9a4a8d6bc8ce56c777a66f9542ffbebe95cab301ec64f52c56
-
SSDEEP
192:7qLQeSRQazZYpwJhhiZL1G29/fqwG2n71aBnTM1p1C:7q4L4ZLg29D37MBTMz1C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bscanService.dll
Files
-
bscanService.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ