ServiceMain
anhuibengbu
lmmz
Behavioral task
behavioral1
Sample
1467a4efcb5c9bb475924b614babe33f.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1467a4efcb5c9bb475924b614babe33f.dll
Resource
win10v2004-20231222-en
Target
1467a4efcb5c9bb475924b614babe33f
Size
98KB
MD5
1467a4efcb5c9bb475924b614babe33f
SHA1
5825d7c5aebe7e97d8d8e073d179372c621794de
SHA256
f04d594ecc52ec5cafb881de2cfdd274e401cd911efb4229ad325c3290e5c73a
SHA512
e3d43e3afbfde486b18b267075584385dfe080f188406e019036d7adc03394431e14e1da04dd0b7df409142e5e8c3f611c64c7ba0d567d9e20dd7aa54838e227
SSDEEP
1536:XzgxmTwqh0WDRi5bBY+aFZR2juuqcexdf/KaCI6a//+Bh:XzgxLqh+lBzyuqJxF/Ka76a//+Bh
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
1467a4efcb5c9bb475924b614babe33f |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ServiceMain
anhuibengbu
lmmz
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ