G:\My Documents\个人资料\vbnet\报警2024年7月27日\AlarmClient - 解决联网判断无响应\AlarmClient\obj\x86\Debug\AlarmClient.pdb
Static task
static1
Behavioral task
behavioral1
Sample
AlarmClient.dat.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
AlarmClient.dat.exe
Resource
win10v2004-20240802-en
General
-
Target
65838f5941d6d26b168bdbef91a98acaff59449fe2d7bd53b0a72f70fa473c29
-
Size
47KB
-
MD5
68c7ae9b5df4245a8da6ee70a29c0fb8
-
SHA1
4858ed48127471559d264dea4c20e37d406a53d7
-
SHA256
65838f5941d6d26b168bdbef91a98acaff59449fe2d7bd53b0a72f70fa473c29
-
SHA512
10e3bff9688097f601f6ceb447020e9bb9687bf6fed2fae618de9e8b24b6fe7a3aa0dea0a2ad348775249cfabe3ca0faedb5709ac2367529e94407e5780397be
-
SSDEEP
768:5mpzDyyazXLQpqgbdnx95c00NQA6deBf0gh8NlqVD/l3qjXSEPYCSm1JBX2eKILe:eyJzbpgdx95oJB8gTVDl3qjXNPMm132d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/AlarmClient.dat.deploy
Files
-
65838f5941d6d26b168bdbef91a98acaff59449fe2d7bd53b0a72f70fa473c29.rar
-
AlarmClient.dat.deploy.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 194B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 265KB - Virtual size: 265KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ