CancelDll
LoadDll
Behavioral task
behavioral1
Sample
800b4f959096fb2fb538bb12c8afacb2.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
800b4f959096fb2fb538bb12c8afacb2.dll
Resource
win10v2004-20231215-en
Target
800b4f959096fb2fb538bb12c8afacb2
Size
85KB
MD5
800b4f959096fb2fb538bb12c8afacb2
SHA1
9bf6c00c65c483d79548b29f1a390b1faf68b5bb
SHA256
73202e8d754c4cf8900775eedb4e8c9d80d6df31d8db4aa75327aa8bdaff33c7
SHA512
eae55dae8c0c2e3addbc2ee6c5671e3d0120e5ea6f1f21879fbe0be72612ae3cacf8d3dbf058cf53dfcd85b265e8701a907b70cff16c552423eca074f55e45d6
SSDEEP
1536:SAVJ0mWeB/iU9D8n+uiVoU5Pli5gMqygq8XcBqkxR+OM4HDlOUw9:zJ0mW8/inq5lsgQgrmquR+IjlJw9
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
800b4f959096fb2fb538bb12c8afacb2 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE