__dbk_fcall_wrapper
dbkFCallWrapperAddr
Behavioral task
behavioral1
Sample
LeftToSurviveLoader_f791ee373e3c8c812df0dcd5f1707278_.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
LeftToSurviveLoader_f791ee373e3c8c812df0dcd5f1707278_.exe
Resource
win10v2004-20240412-en
Target
LeftToSurviveLoader_f791ee373e3c8c812df0dcd5f1707278_.exe
Size
8.7MB
MD5
0d5f0602d1b678e72f5ae061e234423a
SHA1
74540563b860ed073b7ccdb09bdb64ea1ca5915b
SHA256
64d6916771bc79440f09369eda72a94f078d020cd26eca5549691e288683fd50
SHA512
64fd56a8bddab9d1fb95c30ce976709427d0aa828aab6f0e4eb24ce2452ea1b5ade19d11022b9fff1fcc5ee5719fd24bee17aca0045d07407330cf0eff030f0e
SSDEEP
196608:H91wLHsQearE6RYQ10dRniFILGE/zDXFbpp1ds64L:H91qHst8VYRniFtELzFlpnspL
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
LeftToSurviveLoader_f791ee373e3c8c812df0dcd5f1707278_.exe |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE