������Ϣ
�ļ�_��Сת��
Behavioral task
behavioral1
Sample
b99d054b1a2c3c43914d6eed9d979d5074e3fdf3dd08ce9417688d9fc597ca7b.dll
Resource
win7-20240508-en
Target
b99d054b1a2c3c43914d6eed9d979d5074e3fdf3dd08ce9417688d9fc597ca7b
Size
814KB
MD5
104fb2ecd449624ea5ab9aa768be0231
SHA1
8a401d824916cec95c8325e8165174d848ab56d5
SHA256
b99d054b1a2c3c43914d6eed9d979d5074e3fdf3dd08ce9417688d9fc597ca7b
SHA512
bae35404fa2a039323bf76307e4ccce4d7c7387a60f58773876f9ffd70da5c6124a9f436de92de98b53c948598689c988e770e28a6ead6be557bb805aae27306
SSDEEP
24576:3J3fF2iMQz5l5lw0fcczxLKMJB4fvHxnl4Gt1wT+e5wCOU4hXpgG:1TIDzfgG
resource | yara_rule |
---|---|
sample | family_blackmoon |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b99d054b1a2c3c43914d6eed9d979d5074e3fdf3dd08ce9417688d9fc597ca7b |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
������Ϣ
�ļ�_��Сת��
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE