D:\工作\项目\嵌入式\82.CreateEMBProgram\dist\EnpowerProgramer\普通版\04.Enpower_CAN_Programmer\AddShellProgram\WindowsFormsApplication1\obj\Debug\Enpower_CAN_Programmer.pdb
Static task
static1
Behavioral task
behavioral1
Sample
46baa9cb268db5e346541f22dd5599faec8c32f1df947ffc5098fcce0d35ebf9.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
46baa9cb268db5e346541f22dd5599faec8c32f1df947ffc5098fcce0d35ebf9.exe
Resource
win10v2004-20240802-en
General
-
Target
46baa9cb268db5e346541f22dd5599faec8c32f1df947ffc5098fcce0d35ebf9
-
Size
1.6MB
-
MD5
17730d31c9859fe29b98f8e4be07d970
-
SHA1
ffb9dd6627febd66df2a45e005decfd50cdfe501
-
SHA256
46baa9cb268db5e346541f22dd5599faec8c32f1df947ffc5098fcce0d35ebf9
-
SHA512
2a4ffe9da50c1aa7fe9a274ab4cd0a0855952eda3ba821df68cb8b3fdc3d48a3dbaf89555870f2e8d89f5f9a3874feb25adc87d816abb29ab149657c45b1b6b6
-
SSDEEP
12288:GzpxX2TVLw/ibNeTEtHbOmpxX2TVLw/ibNeTEtHbO:RwPbwP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46baa9cb268db5e346541f22dd5599faec8c32f1df947ffc5098fcce0d35ebf9
Files
-
46baa9cb268db5e346541f22dd5599faec8c32f1df947ffc5098fcce0d35ebf9.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ