?ytre@@YAHXZ
DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
Malicious_b8c296782102c76265bf524626520d3154ddcfd6440752514f23f702d760c55a.dll
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
Malicious_b8c296782102c76265bf524626520d3154ddcfd6440752514f23f702d760c55a.dll
Resource
win10v2004-20230621-en
Target
Malicious_b8c296782102c76265bf524626520d3154ddcfd6440752514f23f702d760c55a.exe
Size
75KB
MD5
98d1abb8fef28d64ebcdd3184dc6e2b1
SHA1
936d85a5fe28f1745b823df4c86bd0c6176bf62a
SHA256
b8c296782102c76265bf524626520d3154ddcfd6440752514f23f702d760c55a
SHA512
058d484f7683552937128c06fc91a6fcec47e61ecb79e5f2abbdbd904c52632109b4c08309f2c3be025b51f2c2bed76c697fbc12657024f59d13a724cc393cde
SSDEEP
1536:CY53MNyZS2TinPvX+3pBn9EYm3lHMyYoTivf:x530ysqinXU39E/3lRA
Checks for missing Authenticode signature.
Processes:
resource |
---|
Malicious_b8c296782102c76265bf524626520d3154ddcfd6440752514f23f702d760c55a.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
?ytre@@YAHXZ
DllRegisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ