acceleration
sleeptime
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan.VkHost.6856.22372.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Trojan.VkHost.6856.22372.dll
Resource
win10v2004-20230703-en
Target
SecuriteInfo.com.Trojan.VkHost.6856.22372.dll
Size
1.1MB
MD5
81fb0d4bb6bb2081eba4c9cdbc63ff39
SHA1
6464807f275c2d4b761ab4bc9735c2952be65285
SHA256
17c38669d795041d570650acdd426b0e0bb8b6019b0b9c43e55f368566ea20ac
SHA512
040c61cd8db254c932677bfcf80c6f7feb1690fa7a58ff8a9801062d1be42a2b0ee7529389a4e2edf9aaf4e93967e3c32f8d7793b728e3356285598f5abaa298
SSDEEP
24576:ewR4A8WDC1b3dP968RkNV5pzvnenYErjj8PdvK/:eW4AvC1jdl2NTpSnYKjjSC/
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
SecuriteInfo.com.Trojan.VkHost.6856.22372.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
acceleration
sleeptime
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE