F:\lq\省妇女儿童\PACS接口源码\PACS接口源码\帮助文档\TestWebService\TestWebService\obj\Debug\TestWebService.pdb
Static task
static1
Behavioral task
behavioral1
Sample
1ea8106b657b67c0d90479f97ac2af4b52509dcb51e9854404c269f3d1afe2d7.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
1ea8106b657b67c0d90479f97ac2af4b52509dcb51e9854404c269f3d1afe2d7.exe
Resource
win10v2004-20240802-en
General
-
Target
1ea8106b657b67c0d90479f97ac2af4b52509dcb51e9854404c269f3d1afe2d7
-
Size
2.4MB
-
MD5
8ed6b7c8a2af886d530446f68b35628d
-
SHA1
23f6f2646faae15de69d6f10f492b9b966d58844
-
SHA256
1ea8106b657b67c0d90479f97ac2af4b52509dcb51e9854404c269f3d1afe2d7
-
SHA512
214d6f66bebb5ccc74b8e37754f0036a242f6cd34a606677802a171b51a51783d15fe8a327d1b05c23c551f894242010d879836c2472f0dc157f05b6c5b535d8
-
SSDEEP
12288:xNleDerrxPQ90VvdukG3oKPTNmuINJmPIRjtbAhEWZ85YJCl/ipFLmcM0XkCHUlX:DgiGVYY3C2K0o/Zex/D1ZtHvrTM88
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ea8106b657b67c0d90479f97ac2af4b52509dcb51e9854404c269f3d1afe2d7
Files
-
1ea8106b657b67c0d90479f97ac2af4b52509dcb51e9854404c269f3d1afe2d7.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ