D:\JIML\直下式面板灯项目\计算序列号\obj\x86\Debug\计算序列号.pdb
Static task
static1
Behavioral task
behavioral1
Sample
6357a3b1766f3ebef481aedd9b14f7aef74d56c764343d3cd29a6bd4cc0b5c6d.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6357a3b1766f3ebef481aedd9b14f7aef74d56c764343d3cd29a6bd4cc0b5c6d.exe
Resource
win10v2004-20240709-en
General
-
Target
6357a3b1766f3ebef481aedd9b14f7aef74d56c764343d3cd29a6bd4cc0b5c6d
-
Size
16KB
-
MD5
d098c350cf01ea2968db001c46bc544f
-
SHA1
015d7cb271b069fe120cec83b833961d11c10f94
-
SHA256
6357a3b1766f3ebef481aedd9b14f7aef74d56c764343d3cd29a6bd4cc0b5c6d
-
SHA512
7a491ebf07b48f5102cd1a4bbd88f85481b604c88f5c08ad707011ea95eb3f23570f6441ca39c7bbef4e6b9b867f6f9c19c11346b5b4a859896f4f84bb43c0a2
-
SSDEEP
384:/TfnEfiFeUOJlFY+fXd/76tLgh9uRuiH2R+y6UgfJu:rfEfiJ+fNjW6o2oJUmu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6357a3b1766f3ebef481aedd9b14f7aef74d56c764343d3cd29a6bd4cc0b5c6d
Files
-
6357a3b1766f3ebef481aedd9b14f7aef74d56c764343d3cd29a6bd4cc0b5c6d.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ