OnProcessAttach
VoidFunc
_cgo_dummy_export
Behavioral task
behavioral1
Sample
7dfb8b5feb42853a7da25d04f0bbb5cdb325423a397969beb14b89370094d5b0.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
7dfb8b5feb42853a7da25d04f0bbb5cdb325423a397969beb14b89370094d5b0.dll
Resource
win10v2004-20240708-en
Target
efc39bd3b09f55646a4d7e3be60313a9.bin
Size
5.5MB
MD5
e6ba1c146a736e31b979b26cf1a8adc1
SHA1
a201e74e77bf89cf5e55409706a8cedda7096b51
SHA256
a57e10d0762a0f46d97f2a57cdc0895b4da3fb174b6069a18a1b230686608907
SHA512
abb83b1b12b41d92b609daddf0ff2f0118e155da36acdc542702aa71c03ec069e8b99acd288dbc02b6ae9d86dda1430bb7885e48140078a69b103ee11423720d
SSDEEP
98304:/1a2bCo2vRyJHKoJf5/MC5MsOBZMbPZiQImvkZaScvCMPSvRiMoSh:9asCo2Ut55MlMbRiQfvOmScSh
resource | yara_rule |
---|---|
static1/unpack001/7dfb8b5feb42853a7da25d04f0bbb5cdb325423a397969beb14b89370094d5b0.exe | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/7dfb8b5feb42853a7da25d04f0bbb5cdb325423a397969beb14b89370094d5b0.exe |
unpack002/out.upx |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
OnProcessAttach
VoidFunc
_cgo_dummy_export
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ