?ytre@@YAHXZ
DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
Malicious_da7e542d3a7769ae0cb44571cc3eda30b5ae31fb663ea5f1eef81eaddb455162.dll
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
Malicious_da7e542d3a7769ae0cb44571cc3eda30b5ae31fb663ea5f1eef81eaddb455162.dll
Resource
win10v2004-20230621-en
Target
Malicious_da7e542d3a7769ae0cb44571cc3eda30b5ae31fb663ea5f1eef81eaddb455162.exe
Size
75KB
MD5
50a1a156e93f21903667347b661880e0
SHA1
6081f637e9a4749b9780555be58be105866e2877
SHA256
da7e542d3a7769ae0cb44571cc3eda30b5ae31fb663ea5f1eef81eaddb455162
SHA512
7d417446e500aad506981b7a1c73fc6479e7ff213707437690e20a737a9d736eacb7ff730dae9856edb187e771917913c91ffb6c0fb1cd8a3d25d5dd47414a1e
SSDEEP
1536:CY53MNyZS2TinPvX+3pBn9EYm3lHMyYoTivf:x530ysqinXU39E/3lRA
Checks for missing Authenticode signature.
Processes:
resource |
---|
Malicious_da7e542d3a7769ae0cb44571cc3eda30b5ae31fb663ea5f1eef81eaddb455162.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
?ytre@@YAHXZ
DllRegisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ