24f5ebdad00d567029760a3e364b2702d1402fe4dc6c7e0801824b02bd239c22.7z
- SHA256 24f5ebdad00d567029760a3e364b2702d1402fe4dc6c7e0801824b02bd239c22
Behavioral task
behavioral1
Sample
Phija.exe
Resource
win7-20240221-en
| resource | yara_rule |
|---|---|
| static1/unpack001/Phija.exe | upx |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/Phija.exe |
| unpack002/out.upx |
Unsigned PE
Checks for missing Authenticode signature.
count=9, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=22, id=14, version=7299,
count=60, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=3, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=73, id=1, productName=Unmarked objects,
count=2, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
Unsigned PE
Checks for missing Authenticode signature.
count=9, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=22, id=14, version=7299,
count=60, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=3, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=73, id=1, productName=Unmarked objects,
count=2, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,