D:\北京隆福佳资料(20240914最新)\迈沃德2024(20240914)\大鹏界面(20240914)\软膜最新(20240823)\厌氧软膜20240914触屏版\obj\Release\yyg_2.pdb
Static task
static1
Behavioral task
behavioral1
Sample
f50959db796ea239f320b96e7f8139bd9a8bb2bde17d4345bacd012978459fe4.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f50959db796ea239f320b96e7f8139bd9a8bb2bde17d4345bacd012978459fe4.exe
Resource
win10v2004-20240802-en
General
-
Target
f50959db796ea239f320b96e7f8139bd9a8bb2bde17d4345bacd012978459fe4
-
Size
1.2MB
-
MD5
ef0aaa3a5e193c6dc54c51625a694e04
-
SHA1
5d93022f0e24b4c016a6ced172c58e16085a0d93
-
SHA256
f50959db796ea239f320b96e7f8139bd9a8bb2bde17d4345bacd012978459fe4
-
SHA512
5a0e6a495b5ed30a01a8c1aebb057c7b185f5c2b60d7ba779ae062d3eb9697ec359a8382dc36058013a66cd1b4ca5bb62e63cca65f5f1d55a375653163759c8a
-
SSDEEP
24576:Ehh5ZhAOmfhIDHu6D6/cQNGlvRKaXQH60Nzi1iLa:c5ZyfIO6D6/cQNG6aXQay
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f50959db796ea239f320b96e7f8139bd9a8bb2bde17d4345bacd012978459fe4
Files
-
f50959db796ea239f320b96e7f8139bd9a8bb2bde17d4345bacd012978459fe4.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 229B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ