??4CGS1@@QAEAAV0@ABV0@@Z
WSPStartup
Behavioral task
behavioral1
Sample
21fa162aad26c46c30b7ecd8d92eb089.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
21fa162aad26c46c30b7ecd8d92eb089.dll
Resource
win10v2004-20231215-en
Target
21fa162aad26c46c30b7ecd8d92eb089
Size
723KB
MD5
21fa162aad26c46c30b7ecd8d92eb089
SHA1
3d4006b8b10c9405d4343d7f8ebcf3b5ea46a899
SHA256
bdbdd2164e5a8321df90caa4745b70ffdeb2ece4c311ca57b685ce155618ed87
SHA512
80817d58575f76d4f8c3640612e141cacd8b996ebdf468ac8d2aac478a3402fa258f37fb13dcad686eeb87a61bc817a3c0caee72223cfb56b5ca8cfab1785ead
SSDEEP
12288:6OBsPIXb44SC2IQBC+chhAMWrP37nxliisZ95M6mlFW0HLjC:1Gh6QBC+GhJaTMz5GP7HLjC
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
21fa162aad26c46c30b7ecd8d92eb089 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
??4CGS1@@QAEAAV0@ABV0@@Z
WSPStartup
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE