D:\数据\代码\权利的游戏多开助理\obj\x86\Debug\权利的游戏多开助理.pdb
Static task
static1
Behavioral task
behavioral1
Sample
96e795a64793d32d224ce9b5da1d162b3c723733285baf22cd5490bba4b82d24.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
96e795a64793d32d224ce9b5da1d162b3c723733285baf22cd5490bba4b82d24.exe
Resource
win10v2004-20240802-en
General
-
Target
96e795a64793d32d224ce9b5da1d162b3c723733285baf22cd5490bba4b82d24
-
Size
171KB
-
MD5
788ffb41b61f83421c42f9cf3bdadb68
-
SHA1
503f9ff90810177d4c28f14be8ef8e736c775d05
-
SHA256
96e795a64793d32d224ce9b5da1d162b3c723733285baf22cd5490bba4b82d24
-
SHA512
c6e7eee06aedd2cfb6289cfebbebe78f51fbb601e82156d90bf924dfa9dd5ab3af15fd58b8fd6343c75b15316445c1cb06c4c42b6f0ad03cee46f0bbfb5faacc
-
SSDEEP
1536:M7SzbWtcIQxf0ce6TQ1TIPs4QiuPtPLUnmopPOUuPtPLUnmopPODuPtPLUnmopPf:qttQxscXTtQJv+Obv+OKv+ORkUmIO0y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96e795a64793d32d224ce9b5da1d162b3c723733285baf22cd5490bba4b82d24
Files
-
96e795a64793d32d224ce9b5da1d162b3c723733285baf22cd5490bba4b82d24.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 145KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ