E:\原代码\应用\C-S\OA\mrCYOA\OA\mrCYOA\obj\x86\Release\mrCYOA.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b2679da595f213441dc054320d693f430aff9a518b552425927597ab865c8eb4.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b2679da595f213441dc054320d693f430aff9a518b552425927597ab865c8eb4.exe
Resource
win10v2004-20240802-en
General
-
Target
b2679da595f213441dc054320d693f430aff9a518b552425927597ab865c8eb4
-
Size
1.3MB
-
MD5
3e8db64ffe8de7ccb6565ea6ba3a5943
-
SHA1
da5bfb6d7aa7c2b53aefc5df69cd321b7f5bcbf5
-
SHA256
b2679da595f213441dc054320d693f430aff9a518b552425927597ab865c8eb4
-
SHA512
35f5d21f4427cd595922f46507c8d7f49da2e93120eb777ebc5aa4f6baf430f941f1460c467716c113f538985788cde5f1a0570403c14f2e695712f44f57f306
-
SSDEEP
24576:Udh05eIWWfmAjfCMctcMPXp/z+4qH9hNMWiOzAXe2LX:UxRXp/zHy3eLX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b2679da595f213441dc054320d693f430aff9a518b552425927597ab865c8eb4
Files
-
b2679da595f213441dc054320d693f430aff9a518b552425927597ab865c8eb4.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ