CreateCoreShell
GetSoundShell
_GetDecryptProc@4
_GetEncryptProc@4
_SetDecryptionKey@4
Behavioral task
behavioral1
Sample
5054a69664d994f30cfe3035ca5bd026f2f6d08690cf0985cd70a5a0cb9573d9.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5054a69664d994f30cfe3035ca5bd026f2f6d08690cf0985cd70a5a0cb9573d9.exe
Resource
win10v2004-20231215-en
Target
5054a69664d994f30cfe3035ca5bd026f2f6d08690cf0985cd70a5a0cb9573d9
Size
5.4MB
MD5
b523909297535b98f0557bad3d5ac59e
SHA1
cc15720cfb90f5e98deb54f6be1a31e93a3e53ee
SHA256
5054a69664d994f30cfe3035ca5bd026f2f6d08690cf0985cd70a5a0cb9573d9
SHA512
b58871d6476a03158afa8a5668f14c940fe20d343f3b303dbc3dd619a3e261c70ee2584cb136748982707b2bcda2abeecfb6bd097b63b03297b3c6f1b4f4d565
SSDEEP
98304:cCxP/O/Ac9C3yuCmiCG+iaKKJ0VYuTy+uK6q0fGGVBpB86g2yfe3:FxP/OYc9wyuCmiCG+iaKKJ0VYuTy+uKL
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5054a69664d994f30cfe3035ca5bd026f2f6d08690cf0985cd70a5a0cb9573d9 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CreateCoreShell
GetSoundShell
_GetDecryptProc@4
_GetEncryptProc@4
_SetDecryptionKey@4
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE