Dispatch
InputFile
PrintFile
Static task
static1
Behavioral task
behavioral1
Sample
a791a0cfe16bc3f3ce289e25ba1c82d39c072c0a2c325b30c82a25b67f42a8dc.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
a791a0cfe16bc3f3ce289e25ba1c82d39c072c0a2c325b30c82a25b67f42a8dc.dll
Resource
win10v2004-20240508-en
Target
a791a0cfe16bc3f3ce289e25ba1c82d39c072c0a2c325b30c82a25b67f42a8dc
Size
210KB
MD5
37391a6b93b4d68cd1a76d74ca8d7f52
SHA1
cc578f121763df32cc541fde9403df381684b3e9
SHA256
a791a0cfe16bc3f3ce289e25ba1c82d39c072c0a2c325b30c82a25b67f42a8dc
SHA512
b9dbb48420ec7d44e5884e03b6104baaf740113fdc628767644d7224c5767cc04f9d11cf0d2cd047b591c1e4be99b4245101075b3c5297b23ee10fbb9bb3ccd7
SSDEEP
3072:2uLayxzuxCWiG9ACuFHP3BrnFyC1a3T6Be1AeKrBF0:2uLayx57hC8HPRxyFTh1t6D0
resource | yara_rule |
---|---|
sample | INDICATOR_SUSPICIOUS_EXE_B64_Encoded_UserAgent |
Checks for missing Authenticode signature.
resource |
---|
a791a0cfe16bc3f3ce289e25ba1c82d39c072c0a2c325b30c82a25b67f42a8dc |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Dispatch
InputFile
PrintFile
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE