CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b51614373059edbae403481ccf25b5fb.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
b51614373059edbae403481ccf25b5fb.dll
Resource
win10v2004-20240226-en
Target
b51614373059edbae403481ccf25b5fb
Size
130KB
MD5
b51614373059edbae403481ccf25b5fb
SHA1
ee09eeba7be380e2c2864cd8cfed9f1f323c6151
SHA256
cb2b5d2458890342b322ee6d1dc9005ff2d0dc5993770b6803429e201baf3ac5
SHA512
a266b6a73366edd11ef28fb6fc9f8815a8cd4d69e79dc2f0fd0d29190300cb22a6a45176316ccec213aece046ed9dc73e5a94f118e8ec3fc69af2369e798582f
SSDEEP
1536:PpEFUaLBF/H8MeVpBvlqAnJKK+e4n2nnxFTTDKZYielt12dHQT:izj/czVpBvcAncK+e4mxFTTDLt1WHq
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b51614373059edbae403481ccf25b5fb |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE