ServiceMain
ServicemixX
cervicemixX
svchostdkx
Behavioral task
behavioral1
Sample
9913f175c1839cf5c6c6423756d4323f.dll
Resource
win7-20231215-en
Target
9913f175c1839cf5c6c6423756d4323f
Size
102KB
MD5
9913f175c1839cf5c6c6423756d4323f
SHA1
c668c50fb8cd006196cc8c05cc61e0e13bf5118f
SHA256
847548f7d0064960a6794e3f88a13846253acfb9f5688fe947886a23640ff440
SHA512
ae176cf275bbfa78e0fb6db4def1017f60de8b87448d526c797b7741d97a282c60f43d935433ceec49efcaa6eb1692948ea7f902f7e4d7fbfc810220cea7f426
SSDEEP
3072:DyvcWBDs/1tGF6IPtWheqExxQw3KUxT95hNJOA:+vckDszzkWgpmw3KUxx3NJh
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
9913f175c1839cf5c6c6423756d4323f |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ServiceMain
ServicemixX
cervicemixX
svchostdkx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE