EndSutak
SetSutak
Sutak_Dll
Sutak_Dll_10
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Behavioral task
behavioral1
Sample
454b4eabf2659c19d3d497f1501bbae36b9d15a20c744afaf49fa18fa1352e0a.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
454b4eabf2659c19d3d497f1501bbae36b9d15a20c744afaf49fa18fa1352e0a.dll
Resource
win10v2004-20240412-en
Target
454b4eabf2659c19d3d497f1501bbae36b9d15a20c744afaf49fa18fa1352e0a
Size
3.8MB
MD5
8c11720f97dbff1b073f9f3c54bbfb1b
SHA1
da3247362f461c2c9a2da9747667e557d8fe50db
SHA256
454b4eabf2659c19d3d497f1501bbae36b9d15a20c744afaf49fa18fa1352e0a
SHA512
cebee84205fa0a829d7ea7871c998ff507363316e94777e0467ea9dcc2af82463a27499893429d096e35cd88c791ddf5043d448178183e890b479253f8d83613
SSDEEP
98304:7R0aDrr8t/Lr3ugOUOmgG0hWLizPdu15Si:jHcX3uvgao1b
resource | yara_rule |
---|---|
sample | UPX |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
454b4eabf2659c19d3d497f1501bbae36b9d15a20c744afaf49fa18fa1352e0a |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EndSutak
SetSutak
Sutak_Dll
Sutak_Dll_10
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE