D:\北京隆福佳资料(20240901最新)\迈沃德2024(20240901)\微流控(20240901)\微流控(20240906)国产屏com3(485) 加复位\obj\Release\yyg_2.pdb
Static task
static1
Behavioral task
behavioral1
Sample
be767a33567f24bd54376f4b94de31dacadbee802e48fa5eb43b3c6a19a6baf0.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
be767a33567f24bd54376f4b94de31dacadbee802e48fa5eb43b3c6a19a6baf0.exe
Resource
win10v2004-20240802-en
General
-
Target
be767a33567f24bd54376f4b94de31dacadbee802e48fa5eb43b3c6a19a6baf0
-
Size
438KB
-
MD5
69f341badd88411880a4b9913a4af3b2
-
SHA1
8849c4771b4b939ad72f8359bf0545b82b482d00
-
SHA256
be767a33567f24bd54376f4b94de31dacadbee802e48fa5eb43b3c6a19a6baf0
-
SHA512
1a169b697779e42593744d16119744936f219fb345aeaba2b6f6085efb4e921922859aca58a8022c0323f5f651624dd4fbe5062070999a10aa74aee6f75744d2
-
SSDEEP
12288:ov3CygJI0S460NkNIBWotWGwQDRjrEVTCfKVk:I3FgJZXkeU1wR0k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be767a33567f24bd54376f4b94de31dacadbee802e48fa5eb43b3c6a19a6baf0
Files
-
be767a33567f24bd54376f4b94de31dacadbee802e48fa5eb43b3c6a19a6baf0.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 433KB - Virtual size: 432KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 221B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ