CoGetComCatalog
GetRPCSSInfo
ServiceMain
Wh4tsTh3Fuck
i
Behavioral task
behavioral1
Sample
c2dd3bc012b57267151e50e13831f5ce.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c2dd3bc012b57267151e50e13831f5ce.dll
Resource
win10v2004-20240226-en
Target
c2dd3bc012b57267151e50e13831f5ce
Size
18KB
MD5
c2dd3bc012b57267151e50e13831f5ce
SHA1
8d818fd28a788a32b063ff7a04f8455ed7de3ce9
SHA256
6e24a94f1fc2f312200e7dc81af2375dd59003e339cff799d12cb9c86eace58d
SHA512
123a798333a176cd9c87cfb64cded3c6f8a999ad1b662b870509a03bed2787d01a20ad57dea12bfe0bd7b64e115aa453b6ac13e12cfced60556fa7670e3a342a
SSDEEP
384:9j6kU7+bIQYeKqH01DEz0pPY3DEAEN0v/3mfUrcBaB:9GkU69YeFHGEzhfEWvfjY
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c2dd3bc012b57267151e50e13831f5ce |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CoGetComCatalog
GetRPCSSInfo
ServiceMain
Wh4tsTh3Fuck
i
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE