CancelDll
LoadDll
Behavioral task
behavioral1
Sample
220af350d02ba2285af9f637b6dd6879.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
220af350d02ba2285af9f637b6dd6879.dll
Resource
win10v2004-20231215-en
Target
220af350d02ba2285af9f637b6dd6879
Size
88KB
MD5
220af350d02ba2285af9f637b6dd6879
SHA1
09377094ae24060f93f34ee06639f62a9b1d0777
SHA256
bdc3e1e039b301d417f6ea0654495702302710a2844e45295598c1df819e206b
SHA512
d584ca971b08e0907d1449fa46e69f6b7c52f0a7daf5404078f2c54f49fe8c7ccb77716bca669d756eb26083d3acd85c9d8a7579587c819751b682dd631f5e33
SSDEEP
1536:OoKR1YFY/H4SXxyBvaohaq4JeQIRgt2FI9tKA3OpgzRR+qYdcXEpKYC:+1YZSByxaoh+JVtXQgYdcUpKYC
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
220af350d02ba2285af9f637b6dd6879 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE