F:\桌面源码\登录器打包\LoginMain\Release\LoginMain.pdb
Static task
static1
Behavioral task
behavioral1
Sample
521570c774f7c1cb8cd5357bfc67790ff2b34c4d25c1f0166a42d2aff3d32294.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
521570c774f7c1cb8cd5357bfc67790ff2b34c4d25c1f0166a42d2aff3d32294.exe
Resource
win10v2004-20240802-en
General
-
Target
521570c774f7c1cb8cd5357bfc67790ff2b34c4d25c1f0166a42d2aff3d32294
-
Size
3.2MB
-
MD5
9620826b713642a6b9eedce3f86f8f6d
-
SHA1
771d5afb255e802febeb317910237535ebc91a66
-
SHA256
521570c774f7c1cb8cd5357bfc67790ff2b34c4d25c1f0166a42d2aff3d32294
-
SHA512
e0f19158ce0fb46223be52f53c35ec37f86d8acf0e59737d0a82e984a22830db8bd40f1301a4a212af33a2bea259acd27e71b343a7afd77d3401ef98578222cf
-
SSDEEP
49152:/7J7LMZRCAPKeJgKJ3rqy+WgxZoAFhTJy/+Gm4GbRslOGMx9BmUaGvF9Q4x633ZF:/7hI+EbgWb/+tdCGN4oDNhW3Rtxj7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 521570c774f7c1cb8cd5357bfc67790ff2b34c4d25c1f0166a42d2aff3d32294
Files
-
521570c774f7c1cb8cd5357bfc67790ff2b34c4d25c1f0166a42d2aff3d32294.exe windows:5 windows x86 arch:x86
775bac772432a39c0b3ac76c73f3128d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetStartupInfoA
user32
MessageBeep
gdi32
ExtSelectClipRgn
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
advapi32
RegQueryValueExA
shell32
Shell_NotifyIconA
comctl32
InitCommonControlsEx
shlwapi
PathFileExistsA
oledlg
ord8
ole32
OleFlushClipboard
oleaut32
SysAllocString
ws2_32
send
winmm
timeGetTime
gdiplus
GdiplusShutdown
netapi32
Netbios
psapi
GetModuleFileNameExA
iphlpapi
GetAdaptersInfo
version
GetFileVersionInfoA
msvcrt
strncpy
Exports
Exports
WndHandleDLL
Sections
.text Size: 2.2MB - Virtual size: 4.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1005KB - Virtual size: 1008KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ