_cgo_dummy_export
authorizerTrampoline
callbackTrampoline
commitHookTrampoline
compareTrampoline
doneTrampoline
preUpdateHookTrampoline
rollbackHookTrampoline
stepTrampoline
updateHookTrampoline
Behavioral task
behavioral1
Sample
2024-05-13_9548bfa486deadab49491ecc949e68cf_hive.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-05-13_9548bfa486deadab49491ecc949e68cf_hive.exe
Resource
win10v2004-20240508-en
Target
2024-05-13_9548bfa486deadab49491ecc949e68cf_hive
Size
11.2MB
MD5
9548bfa486deadab49491ecc949e68cf
SHA1
2b38e2e7306901b893e1e681e5b46dcda8f9360e
SHA256
c6a1229cff58be0e237fd2a679a464905d8352a5a6b7e2090347b2c72a5955d4
SHA512
e5e7892f80c00161f192293535d89607d59e89e5967e7c0511b826bf91500c5df0548643f6eb390d1b32575affaa4bd897d6fa51a6d8f805368d3b4f63c42fd0
SSDEEP
98304:cC3kE4lHyn4gpEe0QssbJjp1EfmCMbQ/:xL0iljoe9M
resource | yara_rule |
---|---|
sample | UPX |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2024-05-13_9548bfa486deadab49491ecc949e68cf_hive |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
_cgo_dummy_export
authorizerTrampoline
callbackTrampoline
commitHookTrampoline
compareTrampoline
doneTrampoline
preUpdateHookTrampoline
rollbackHookTrampoline
stepTrampoline
updateHookTrampoline
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE