cvar
g_pCVar
Static task
static1
Behavioral task
behavioral1
Sample
darkstorm/TF2Base.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
darkstorm/TF2Base.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
darkstorm/TF2Base.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
darkstorm/TF2Base.exe
Resource
win10v2004-20231222-en
Target
2051cc897456d03138a6e709ac3d6f1b
Size
951KB
MD5
2051cc897456d03138a6e709ac3d6f1b
SHA1
a29987902b69cdb0208dcf50d4cc1eb3eb7396a5
SHA256
498f8fef7744485ef9da3c50819de9aef73fd19f06800e0f64444341d75a7c16
SHA512
24105b3f89e7d44eeb57842578a2f350f796c543cd8ed76a0785bffc0a625b4687679b56f3b89cb0521a226e95cba7571d6446fc2a0a8187041e5a6845886c12
SSDEEP
24576:RKsjYQEQrmRGE/Pefd+eEZblINuuhPGQLCahveqa:RJKBRN3jZbPzQLCaFet
Checks for missing Authenticode signature.
resource |
---|
unpack001/darkstorm/TF2Base.dll |
unpack001/darkstorm/TF2Base.exe |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
UnhandledExceptionFilter
cvar
g_pCVar
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ