ServiceMain
anhuibengbu
lmmz
Behavioral task
behavioral1
Sample
06ac3c420fae6731792c26b66cde583f.dll
Resource
win7-20231215-en
Target
06ac3c420fae6731792c26b66cde583f
Size
98KB
MD5
06ac3c420fae6731792c26b66cde583f
SHA1
cbfff04c6c5c37abe2d4b15d98aad53b7de212aa
SHA256
9d72ad036fdc7384b39771a4561a6c9654f4eb3a1caa54dc2b4ae6134bce0de7
SHA512
66bd7787b29105ca67c52c998dccafa144b04043ecb85958484bf939369712a5c1887c35b752c9eb8560b908dbca8bedfe140909614c41892353f11dca2d9cc3
SSDEEP
1536:XzgxmTwqh0WDRi5bYY+aFZR2juuqcexvf/HaMI6a//+B3:XzgxLqh+lYzyuqJxX/HaR6a//+B3
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
06ac3c420fae6731792c26b66cde583f |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ServiceMain
anhuibengbu
lmmz
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ