D:\北京隆福佳资料(20240830最新)\迈沃德2024(20240830)\微流控\微流控(20240831)国产屏com3(485) 加复位\obj\Release\yyg_2.pdb
Static task
static1
Behavioral task
behavioral1
Sample
81028eb7f485092fd38ebdee515cb62924685b83df4ea6621e9792433560955d.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
81028eb7f485092fd38ebdee515cb62924685b83df4ea6621e9792433560955d.exe
Resource
win10v2004-20240802-en
General
-
Target
81028eb7f485092fd38ebdee515cb62924685b83df4ea6621e9792433560955d
-
Size
454KB
-
MD5
e8150071783b47467463e44f5d44a7aa
-
SHA1
59d67ca7728fee94651b9a4110c79eecb9ccadee
-
SHA256
81028eb7f485092fd38ebdee515cb62924685b83df4ea6621e9792433560955d
-
SHA512
777abd844ad61ce04b2936383242df207e624a09f856f61175acc443f5a664bd40f57e64e6d9512344cc5686541613e69e0a0e817e30bbe1fd9b9e67831e5062
-
SSDEEP
6144:q1FD2cLRmCnwHvf1Dk9VMVsHT9qtREiV0hT5CL/sWTCfKOIY:qvzLHcDk9hz9qz62L5CfKE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 81028eb7f485092fd38ebdee515cb62924685b83df4ea6621e9792433560955d
Files
-
81028eb7f485092fd38ebdee515cb62924685b83df4ea6621e9792433560955d.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 449KB - Virtual size: 448KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 207B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ