_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
5ffc20f7e3c5310c6a65a9917b05a930.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5ffc20f7e3c5310c6a65a9917b05a930.dll
Resource
win10v2004-20231222-en
Target
5ffc20f7e3c5310c6a65a9917b05a930
Size
118KB
MD5
5ffc20f7e3c5310c6a65a9917b05a930
SHA1
f754725b0253bb95123c80e630d719b62cfb9d87
SHA256
7f9e148f180fea9e2b6fdb7b84e303354a642855f08eca43b1ebcd1944aecae1
SHA512
a48ccb9fcc56f5d09ed3640eb7ebe5ffeba768cbe8319119d07f1bdc712674f9bf8bfa68ad4780a0345421bd821bdcb7b1c8cbd99aa92e47445d39786c05268d
SSDEEP
1536:88DDS7LFiLjnavBSsOnOonMaPJtSNBeAt94nouy8Af206g:NIFYjnav4bnOAMaWeAt2outKG
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5ffc20f7e3c5310c6a65a9917b05a930 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE