DllRegisterServer
ServiceHandler
ServiceMain
Behavioral task
behavioral1
Sample
2682e14d60f91e78f8da9d6a79475e34.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2682e14d60f91e78f8da9d6a79475e34.dll
Resource
win10v2004-20231215-en
Target
2682e14d60f91e78f8da9d6a79475e34
Size
64KB
MD5
2682e14d60f91e78f8da9d6a79475e34
SHA1
1403ca97f4bfe764695e463f8fb0b3fd16dbee62
SHA256
5e4ff03a3236a13c72f382193ce629dff3964ac39bf6b5ed5075ce77b5f8e776
SHA512
7e2a59068ddb721639d098eb662a70476bad471c68cc430372d2c93dad51fdf385c61b7d582f3448418359828ad9f1c256b039dbc24e9d046f9bc9b0969d9cfc
SSDEEP
768:CUhWyTnr2nveO42m3+NxEXBr0ze9hSRye8QPw137P7ju:CUhzTn6nvs2muNiRFrSRyeoR7DS
Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.
resource | yara_rule |
---|---|
sample | patched_upx |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2682e14d60f91e78f8da9d6a79475e34 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllRegisterServer
ServiceHandler
ServiceMain
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE