@@Main@Finalize
@@Main@Initialize
@@Unithome@Finalize
@@Unithome@Initialize
_Form1
_Form2
__GetExceptDLLinfo
___CPPdebugHook
Behavioral task
behavioral1
Sample
0bd802cf89052ec6d9ae6a2f7f1bd1f9a7a751f4e68355d92b7e256dfe95cbda.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
0bd802cf89052ec6d9ae6a2f7f1bd1f9a7a751f4e68355d92b7e256dfe95cbda.exe
Resource
win10v2004-20230703-en
Target
0bd802cf89052ec6d9ae6a2f7f1bd1f9a7a751f4e68355d92b7e256dfe95cbda
Size
982KB
MD5
238d9deca19048ec0c3800e33125dcb0
SHA1
9ed3c5c2f8ca579b10c06f6ff52512269683f793
SHA256
0bd802cf89052ec6d9ae6a2f7f1bd1f9a7a751f4e68355d92b7e256dfe95cbda
SHA512
f1c9bfb01d09d6c4a5a6d2204fe5df0e45022d98c126dc967c28cd67bb23477f14c61fbd061cc8e50747135d5e7f58f719ea6d4ba42766ce07097459d06b7cb3
SSDEEP
12288:Nw2WP2Zl72X35II2III9ns27rT2lGU6tKa/w888888888888W88888888888CItL:a2tQH5II2IIIRf3T296tKa/1cKa/
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0bd802cf89052ec6d9ae6a2f7f1bd1f9a7a751f4e68355d92b7e256dfe95cbda |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
@@Main@Finalize
@@Main@Initialize
@@Unithome@Finalize
@@Unithome@Initialize
_Form1
_Form2
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE