D:\昆山整理虚拟楼盘工具\建库工具\建库工具\obj\x86\Debug\建库工具.pdb
Static task
static1
Behavioral task
behavioral1
Sample
f96414ef56bdcfda9cf982c5238a89c707ae14a4ecc62890be1aba359c3efeafN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f96414ef56bdcfda9cf982c5238a89c707ae14a4ecc62890be1aba359c3efeafN.exe
Resource
win10v2004-20240802-en
General
-
Target
f96414ef56bdcfda9cf982c5238a89c707ae14a4ecc62890be1aba359c3efeafN
-
Size
57KB
-
MD5
38829aff8a09e02d1f22e75d05a7ddc0
-
SHA1
d6bb8c992c8423027c2669ab633e22ea4b9c4d4d
-
SHA256
f96414ef56bdcfda9cf982c5238a89c707ae14a4ecc62890be1aba359c3efeaf
-
SHA512
7cde57d581ad50d74635b509bdadfa335e12a2394eb47df602ebdf5eed3bf65424ffd1c6d7818554d6d504c18991c9c45ffcbcefee8b9da483e92ae4c2ee544a
-
SSDEEP
1536:SlgoIPSNoigse2ACM+8MU+tVvry9mjSbWBOjX7GLKEB0:SGiggBKX7MKEq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f96414ef56bdcfda9cf982c5238a89c707ae14a4ecc62890be1aba359c3efeafN
Files
-
f96414ef56bdcfda9cf982c5238a89c707ae14a4ecc62890be1aba359c3efeafN.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 143B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ