SetupWorkStation
SetupWorkStationW
ShowState
Behavioral task
behavioral1
Sample
59cb8474930ae7ea45b626443e01b66d.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
59cb8474930ae7ea45b626443e01b66d.dll
Resource
win10v2004-20230220-en
Target
59cb8474930ae7ea45b626443e01b66d.bin
Size
711KB
MD5
59cb8474930ae7ea45b626443e01b66d
SHA1
88069cb17ab766f2d4f68d679d11dcd844bcfb27
SHA256
7fdfc719935d938651f45aafef3cd2ecc0020e9b77ac0780edb3ba585c16c9e2
SHA512
55fafe5222dc07737544380783970cec76e55449fa7ae89d8031290b4de3c4883079bb65f116df27b59a540a43f0bc224d9b17b2caa01294e58801fe5a8a9d85
SSDEEP
12288:RpH+IEAa+x/Nonyl5YCRDTUi9I9wuK6PMXul8u6JyczhVJMPOh5a+SQvkqW5iMwg:RpeIEA9oThie9tK6PMeuu6blqw5df8zm
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
59cb8474930ae7ea45b626443e01b66d.bin |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
SetupWorkStation
SetupWorkStationW
ShowState
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE