D:\jenkins\workspace\FtspWindowsClient_InitTool_Pre_Branches_无签名\Repositories\obj\x86\Release\Repositories.pdb
Static task
static1
Behavioral task
behavioral1
Sample
274c01c00e38392e6751a2af627318a0N.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
274c01c00e38392e6751a2af627318a0N.dll
Resource
win10v2004-20240709-en
General
-
Target
274c01c00e38392e6751a2af627318a0N.exe
-
Size
31KB
-
MD5
274c01c00e38392e6751a2af627318a0
-
SHA1
78d3759554ce37c262d72b0fac4a1fb613a7fd02
-
SHA256
c526a562148db3bdd730a780976799b26e4b28e43654233bd284a22b3c32f99b
-
SHA512
a0a3c20de6005cf1f491e03a019f2ff7a4a92a1fa33fe084bdd7273fcfdcb2196871f46698505952d15cf5d32d6098728590331dec9e71df30cef41f86dba0c9
-
SSDEEP
768:MVGj5d4Um+1phxJGBVveC9kpQUwn2hRMEwZ:MVGj5dPm+1BJyECL9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 274c01c00e38392e6751a2af627318a0N.exe
Files
-
274c01c00e38392e6751a2af627318a0N.exe.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 972B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ