E:\网安\免杀对抗\C#与go语言\C#代码项目\ConsoleApp3\ConsoleApp3\obj\Debug\ConsoleApp3.pdb
Static task
static1
Behavioral task
behavioral1
Sample
6e70be13e66e17fba1cfc01d516583980bdb1c4a117b2e17d70063fc5da9200cN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
6e70be13e66e17fba1cfc01d516583980bdb1c4a117b2e17d70063fc5da9200cN.exe
Resource
win10v2004-20241007-en
General
-
Target
6e70be13e66e17fba1cfc01d516583980bdb1c4a117b2e17d70063fc5da9200cN.exe
-
Size
12KB
-
MD5
dddc1463294fbfe21770970806653070
-
SHA1
1a3198adfc9d131bf72026240cb1821283b8aa81
-
SHA256
6e70be13e66e17fba1cfc01d516583980bdb1c4a117b2e17d70063fc5da9200c
-
SHA512
07ba23da7bfa1865e8346ef7d7db3ce8ed2b2d05817ba50d7c58a8de49571eb0b9ecff48a0525eb85dd308b75fe4def0ef7b5250f769c6b8ad7ad930223965a5
-
SSDEEP
192:TYEomy7Aj/1y4KNNONK7ea/iMnJgnsITSwy6fIEmB2UvmvjwUE:T1jZy4K246a/nnJKsOSv6fIEUbvmvj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6e70be13e66e17fba1cfc01d516583980bdb1c4a117b2e17d70063fc5da9200cN.exe
Files
-
6e70be13e66e17fba1cfc01d516583980bdb1c4a117b2e17d70063fc5da9200cN.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ