?ytre@@YAHXZ
DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
Malicious_bd1ebf6fcf047b8247ded0a3b73a83479eb422a2c6e145a7d9d6d2a02b560ea2.dll
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
Malicious_bd1ebf6fcf047b8247ded0a3b73a83479eb422a2c6e145a7d9d6d2a02b560ea2.dll
Resource
win10v2004-20230621-en
Target
Malicious_bd1ebf6fcf047b8247ded0a3b73a83479eb422a2c6e145a7d9d6d2a02b560ea2.exe
Size
75KB
MD5
c88429bca876b823fb97356958215e40
SHA1
bee0a33c47aef836cd471c836671b6a9fc54a71c
SHA256
bd1ebf6fcf047b8247ded0a3b73a83479eb422a2c6e145a7d9d6d2a02b560ea2
SHA512
47c7f66d7b1dc35a7be17a062185120e8f8867b7ef14ef05f3eda00bc0c0252f9825877f1b79a58bf486017f17df2e980b22bd30d067bb31d12fc2589d0729db
SSDEEP
1536:CY53MNyZS2TinPvX+3pBn9EYm3lHMyYoTivf:x530ysqinXU39E/3lRA
Checks for missing Authenticode signature.
resource |
---|
Malicious_bd1ebf6fcf047b8247ded0a3b73a83479eb422a2c6e145a7d9d6d2a02b560ea2.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
?ytre@@YAHXZ
DllRegisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ