ServiceMain
Start
Static task
static1
Behavioral task
behavioral1
Sample
c96011bfd80aaab78a2e6bd43b5a761f6b880ee939d53357c7fe08ead098f32f.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
c96011bfd80aaab78a2e6bd43b5a761f6b880ee939d53357c7fe08ead098f32f.dll
Resource
win10v2004-20230703-en
Target
c96011bfd80aaab78a2e6bd43b5a761f6b880ee939d53357c7fe08ead098f32f
Size
3.6MB
MD5
69afa2897c7d911b804757b306777117
SHA1
6bc9140a9acb714ba6c9607460ab304b5d726ff4
SHA256
c96011bfd80aaab78a2e6bd43b5a761f6b880ee939d53357c7fe08ead098f32f
SHA512
e6264222d6f3820a05997d675b938d99027d265cdca40fc5b7a7e4ed73e63bbd4108662fec5f894626f146af37e19d55d0dd8315b896dfae1eecb5dc7bd9dc9b
SSDEEP
49152:EU6B1p2QkAoLJHtvZzTPOgDvwnfT5XuM0mwi2HSVYdCdme3c5NK2dOduZRNd7GZE:p6V2vLL1hZz5vOddKCdmes59dFT7o6
Checks for missing Authenticode signature.
resource |
---|
c96011bfd80aaab78a2e6bd43b5a761f6b880ee939d53357c7fe08ead098f32f |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ServiceMain
Start
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ