ServiceMain
anhuibengBB
lmmz
Behavioral task
behavioral1
Sample
a7ae47315be47fc7c1341ce1d06bb5e1.dll
Resource
win7-20231215-en
Target
a7ae47315be47fc7c1341ce1d06bb5e1.exe
Size
98KB
MD5
a7ae47315be47fc7c1341ce1d06bb5e1
SHA1
d0652d1977a23f7b5b81481cecc2a763b082112c
SHA256
4f70cf490d98ed6a6d60c1cc1f1a192a5ace13f86f6d0d148d4f31455c424ee2
SHA512
cc6f01592faa0b3d5b708feb1751c3c1141613cad1de7a78858402388a381ad3dc79d3025e44470a600491890bcb21c760c910904cf8f635720d24ecb0e7e5ac
SSDEEP
1536:3TzxmTwqh0WDRi5bPYyWWZRQ6gouqcedXf/Ea9z6a//rBK:3TzxLqh+lPmPouqJdP/EaN6a//rBK
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
a7ae47315be47fc7c1341ce1d06bb5e1.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ServiceMain
anhuibengBB
lmmz
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ