A
B
C
E
F
__dbk_fcall_wrapper
dbkFCallWrapperAddr
xs01949769769796767934696364796464739434673649
Behavioral task
behavioral1
Sample
1.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1.dll
Resource
win10v2004-20230220-en
Target
1.bin
Size
1.9MB
MD5
ddd1797b10a4499f241e1dbd8f20c3e5
SHA1
e2aa8cd0e8d057386750fd94dcaa042771790892
SHA256
3947e2d785086d11c166549cf4c7f46a5d6b4f0c5a09593e81f4429ae2faf12d
SHA512
bb8c4baa8ab7aa68bfef10951b5a777e7931aaa3f86fc8f169ee11b0d73e3fbacb10f0bba14f382bed8d5e1c889f101da1319ae14621c54ebb70bba5a1d50a79
SSDEEP
24576:Q2x/05fEAWoIQ4CKOxR5nFGsO8fRFUSwbh0tNd7oWo1Ht04zg8IWvvirAC0/t/ec:QMM5fS7Et9TU3h0VoZvE8IWyMTtmSEK
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1.bin |
unpack001/out.upx |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
A
B
C
E
F
__dbk_fcall_wrapper
dbkFCallWrapperAddr
xs01949769769796767934696364796464739434673649
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ