CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b9ddfaa8b24b28097131e4f7f346839e.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b9ddfaa8b24b28097131e4f7f346839e.dll
Resource
win10v2004-20240226-en
Target
b9ddfaa8b24b28097131e4f7f346839e
Size
84KB
MD5
b9ddfaa8b24b28097131e4f7f346839e
SHA1
48ad9777b1dffe88db4cb7dbc3b691b09a92c218
SHA256
140aa97fd7eddddc7e6a48b9fec44ed82c0b514129b98f30ffbbf8cf302924de
SHA512
2293ac59d3b952821bb7ee230e6d61cfc1d85e74b2a6b4c01dfe80665287504ea54e004d793a94246d71fa4116fd41ae91cc7d30807422404bbdf9ab72d3580b
SSDEEP
1536:aI9js9B05V54qYegt12B5OdO1vnL0AKDTNV79nwM9d2uzLXGSg:Xjs9B6AZegt1K5OdE4A4TNmuzTNg
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b9ddfaa8b24b28097131e4f7f346839e |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE