E:\开发资源\自动升级\CheckUpdate.Net-master\CheckUpdate.Net\UpdateFileCommon\obj\Debug\UpdateFileCommon.pdb
Static task
static1
Behavioral task
behavioral1
Sample
UpdateFileCommon.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
UpdateFileCommon.dll
Resource
win10v2004-20240508-en
General
-
Target
UpdateFileCommon.dll
-
Size
22KB
-
MD5
4bc8ef9a9096f7eb08ec2614c0acb9bf
-
SHA1
5293a8bf95ad3b1ea0b4caec38ae678738e9df7f
-
SHA256
91a18302f85d3fa55521487b5df94a5f55c1faf7c0ad3f51d0387b87deffb439
-
SHA512
1c6feff0a4d2d4ffe901ffe90c98d6038049581226edee74780d537b8878d4e7442f88ac9d3d0e997f938f28337f5ec654e95359b7d78968d40ef603f8662bca
-
SSDEEP
384:oW3lRHvIr3Z4nTq6dyc4RhJ4NCP0y6KrNotdlp0VGaXPD6n4okK7t2G7orrfW0:tECwc4/mNCsy6zsxL6p8ff
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource UpdateFileCommon.dll
Files
-
UpdateFileCommon.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 988B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ