E:\项目\F4\Release\F4.pdb
Static task
static1
Behavioral task
behavioral1
Sample
f047d49d648c1aef0277443feac189a428fe6583244de63fc68dfdc896a59486.exe
Resource
win7-20240903-en
General
-
Target
f047d49d648c1aef0277443feac189a428fe6583244de63fc68dfdc896a59486
-
Size
14.8MB
-
MD5
36d61ac6893766fc5c13b9a596d45fb0
-
SHA1
aeaf9f1fd2101269a0b906e4684548e0bd7a8e3d
-
SHA256
f047d49d648c1aef0277443feac189a428fe6583244de63fc68dfdc896a59486
-
SHA512
415e31ee3e7a89c7f7e9b64a3c717965d692deb878e2d3b71257b895c917d20fd8f15029136942a292d086941ecc4c21104c3af4a35b01060830afab2a54c349
-
SSDEEP
393216:kSPFSUTUuYAW1Zo4BWgh69aude+9a1SZtOrD+l:lLjW1Zo4BRW/dz9ftOri
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f047d49d648c1aef0277443feac189a428fe6583244de63fc68dfdc896a59486
Files
-
f047d49d648c1aef0277443feac189a428fe6583244de63fc68dfdc896a59486.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 325KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 119KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.enigma1 Size: 11.3MB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enigma2 Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE