C:\C#Net\报警软件\报警服务器\AlarmServer\obj\Debug\AlarmServer.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0c6d0d3359ccc28c8334a95fa04a715a9ec3420bb8b7b2fff44a9fc51b2c9cb1.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
0c6d0d3359ccc28c8334a95fa04a715a9ec3420bb8b7b2fff44a9fc51b2c9cb1.exe
Resource
win10v2004-20240802-en
General
-
Target
0c6d0d3359ccc28c8334a95fa04a715a9ec3420bb8b7b2fff44a9fc51b2c9cb1
-
Size
12KB
-
MD5
e40f83b8a4a2548c9d0fd48d91a62acd
-
SHA1
26aaec474cfc440ab126770a828bea3fc8a94929
-
SHA256
0c6d0d3359ccc28c8334a95fa04a715a9ec3420bb8b7b2fff44a9fc51b2c9cb1
-
SHA512
ac77a7d665525d40288d9a01740bf4d656f02f2103a4d38abf681d649f04d243a507e2400f89e2bc7de28c455e926b94afbb5944c3f542d58b5bddd626a9d6f2
-
SSDEEP
192:0HrT0VWCTBYfhirlf3kuTDL+M2tprqxIW1Y8H5KDDXyVNkNufTeY:0HYLTmf2HLotprqZH5KDDiVmkfTe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c6d0d3359ccc28c8334a95fa04a715a9ec3420bb8b7b2fff44a9fc51b2c9cb1
Files
-
0c6d0d3359ccc28c8334a95fa04a715a9ec3420bb8b7b2fff44a9fc51b2c9cb1.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ