ServiceMain
SvchostPushServiceGlobals
decra
Behavioral task
behavioral1
Sample
acc5f33ea59a3aceb71f356e818aa32e.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
acc5f33ea59a3aceb71f356e818aa32e.dll
Resource
win10v2004-20231215-en
Target
acc5f33ea59a3aceb71f356e818aa32e
Size
54KB
MD5
acc5f33ea59a3aceb71f356e818aa32e
SHA1
483682b15fa526f620e525292a26c868fd809769
SHA256
56fb4078bce366f84deb9236987465ac616717da91edb409344bdbec5f8969d9
SHA512
14676268e9a25ae1fae66b758ac508f1e18ef520af044d8626b6c2be48bdcc5d7983d12fbeb112c06e7b1f24bdc3c6edd57a2aa6c91b40fbe38ea93a0956cd44
SSDEEP
1536:A7L+x1909dYvJcq6rTY/kSVqvNWUkQCMS+mAfc:H9gdYBhp/kSVENCQPmAU
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
acc5f33ea59a3aceb71f356e818aa32e |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ServiceMain
SvchostPushServiceGlobals
decra
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE