OnProcessAttach
VoidFunc
_cgo_dummy_export
Behavioral task
behavioral1
Sample
7a0049003ccde801fcf5164f4a9e7975d49354915576d9d0d57e9334e33802e3.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
7a0049003ccde801fcf5164f4a9e7975d49354915576d9d0d57e9334e33802e3.dll
Resource
win10v2004-20240708-en
Target
1166172ba975159365436b2400b1ed33.bin
Size
5.5MB
MD5
81cc3661b99bdab8d56a676defc4032f
SHA1
798115b2d921b05d2285f0b04ac70bddfb0e2de0
SHA256
fc74e4c50bcd4fedd29694db5133cc238b530bfaa7352ee34ed90fdafa3e9b51
SHA512
48ec40abae7a0b5baab44fe1dc5b537579fab7b3b3fb7cca9edb3d6d6fae35fd76808fa864f5f530067d5c0da86e8533a419c37d24b84729bfdba95b0f780843
SSDEEP
98304:friqz2er7+83MIIvSQ51cbK88yybJUv+kG6n0frn+2FycCcoLo1NgvDNcoEg3uZS:fr2er7+83MIIegy9+P6nCn+jcxgvDSor
resource | yara_rule |
---|---|
static1/unpack001/7a0049003ccde801fcf5164f4a9e7975d49354915576d9d0d57e9334e33802e3.exe | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/7a0049003ccde801fcf5164f4a9e7975d49354915576d9d0d57e9334e33802e3.exe |
unpack002/out.upx |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
OnProcessAttach
VoidFunc
_cgo_dummy_export
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ