C:\Users\lilin\Desktop\GIT烧录\04.Enpower_CAN_Programmer\AddShellProgram\WindowsFormsApplication1\obj\Debug\Enpower_CAN_Programmer.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ecc65b9c6635831ff7630dbe51768244be699ebf63da3c417ea1cd1c48006b10.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ecc65b9c6635831ff7630dbe51768244be699ebf63da3c417ea1cd1c48006b10.exe
Resource
win10v2004-20240802-en
General
-
Target
ecc65b9c6635831ff7630dbe51768244be699ebf63da3c417ea1cd1c48006b10
-
Size
1.2MB
-
MD5
b19bdfd7abb7bb98e154c552661e03bb
-
SHA1
7758c076575579cf62d4c29e689c4c5ef76fefcf
-
SHA256
ecc65b9c6635831ff7630dbe51768244be699ebf63da3c417ea1cd1c48006b10
-
SHA512
60606c84b66d7518c82a465be5f248d08a8b4b31b94f6a78063a112f55b7b0d95dfe5d8b043fcb608f125281e00ba5acbc5dfc11562cd4323ecd03508f505f23
-
SSDEEP
6144:uNfzHhIn9/HYi04I3FvwSs5vWPP9bZ42MMSSzHhIn9/HYi04I3FvwSs5vWPP9bZQ:u1zHhIn9/5mjf4ozHhIn9/5mjf4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ecc65b9c6635831ff7630dbe51768244be699ebf63da3c417ea1cd1c48006b10
Files
-
ecc65b9c6635831ff7630dbe51768244be699ebf63da3c417ea1cd1c48006b10.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ