ServiceMain
anhuibengbu
lmmz
Behavioral task
behavioral1
Sample
57e4d43120d6a36940521c4e6b90c87c.dll
Resource
win7-20231215-en
Target
57e4d43120d6a36940521c4e6b90c87c
Size
98KB
MD5
57e4d43120d6a36940521c4e6b90c87c
SHA1
380173e77b0a0174cf1f7c0fc712ca5428461510
SHA256
f81a55d402e3d174de651482f99f602793410f3c0695f6dd374e4950fc8b7e3f
SHA512
d0775c5271412c5da9e8f20ad6d87026b0206be0f1360e71485cc1928181d147a0e50163305c080fc074dfd0cef54ec3b627f7c7ae11e4d14f6c0c34185ecfe9
SSDEEP
1536:XzgxmTwqh0WDRi5bBY+aFZR2juuqcexdf/KaCI6a//+Bm:XzgxLqh+lBzyuqJxF/Ka76a//+Bm
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
57e4d43120d6a36940521c4e6b90c87c |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ServiceMain
anhuibengbu
lmmz
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ