F:\lianxi\fuwuq11111\fuwuq11111\obj\Release\fuwuq11111.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ab3ddcc1149e1d06de5640d28f95dd45b181269fd1000f29b13e07bd076742cc.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ab3ddcc1149e1d06de5640d28f95dd45b181269fd1000f29b13e07bd076742cc.exe
Resource
win10v2004-20240508-en
General
-
Target
ab3ddcc1149e1d06de5640d28f95dd45b181269fd1000f29b13e07bd076742cc
-
Size
19KB
-
MD5
2c0a95ccd914a994c38b5fe3b2c745d1
-
SHA1
70855c30fcb7ecb82c394e79fda7266933fb9f42
-
SHA256
ab3ddcc1149e1d06de5640d28f95dd45b181269fd1000f29b13e07bd076742cc
-
SHA512
811afe57cdb875935683092ae6def7f3f756934a5dd24d1e24b5507ef144c282eb2375ace4ed136af45f23fa774bcbcb7a42166d144fb66b01cd73bca388a891
-
SSDEEP
384:FyZuGWdn/m4M/EeM6WayJLf45sMz6aQffoZjT+9B9U4f4O:FyAGWd/mVEp5NlMGsmBT4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab3ddcc1149e1d06de5640d28f95dd45b181269fd1000f29b13e07bd076742cc
Files
-
ab3ddcc1149e1d06de5640d28f95dd45b181269fd1000f29b13e07bd076742cc.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 111B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ