E:\Seafile\gs\C#\VS2010\回归\回归\obj\x86\Debug\回归.pdb
Static task
static1
Behavioral task
behavioral1
Sample
d77cc758dc78e2c04392e4790a9ee3f9c8000499340de2e886fd769ae3a1cd80.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d77cc758dc78e2c04392e4790a9ee3f9c8000499340de2e886fd769ae3a1cd80.exe
Resource
win10v2004-20240802-en
General
-
Target
d77cc758dc78e2c04392e4790a9ee3f9c8000499340de2e886fd769ae3a1cd80
-
Size
20KB
-
MD5
c0202222306533ee8b01bde99d0c9926
-
SHA1
080e6872a205a2e5097a83fcc94b77f6797b5dce
-
SHA256
d77cc758dc78e2c04392e4790a9ee3f9c8000499340de2e886fd769ae3a1cd80
-
SHA512
c2f9c2ab21de7eced5b615d6b00ef5435594665e0b02a7535ee7a376ad0bf81e4ae304fb48a3fb9f464c61f9163d1e2fc48711d3ae296483b34f4517a0642a16
-
SSDEEP
384:JCo59cyyHeBIoLpxAocXrAlGBU3dVVKvo5FP7FXGXVOzLUDh0tPA8f3uLlOwNOWE:JsMp/kVUyetnp1X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d77cc758dc78e2c04392e4790a9ee3f9c8000499340de2e886fd769ae3a1cd80
Files
-
d77cc758dc78e2c04392e4790a9ee3f9c8000499340de2e886fd769ae3a1cd80.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ