ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
Behavioral task
behavioral1
Sample
HardStory.bat
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
HardStory.bat
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
HardStory.exe
Resource
win7-20240705-en
Target
6f8c2a0890349734e513a65addef75ab_JaffaCakes118
Size
2.8MB
MD5
6f8c2a0890349734e513a65addef75ab
SHA1
fa7d4d90a94f843a79ed7ee862b261ac4b41012b
SHA256
9627dec8406256ab1be8eb477c7d62872141d69f4a7661587562c001bbec3d38
SHA512
051bab8777fe4b0e07b007145342d63776fb3194f3d3ab2fa8837d781ac03207883812d423afe587f76d761f7c51b9da2e639055bfe5e0f57ea9a0952dc1a822
SSDEEP
49152:VJ2PJwfFjZhPyi7F1RPEV1paMJmtXYwfWksHFVZfQYmT4nhtGZ3CeO+Zm6go1AKt:eBwfF9haU1yp1JmZH+R1fLmcn/8CT+Zj
resource | yara_rule |
---|---|
static1/unpack001/HardStory.exe | themida |
Checks for missing Authenticode signature.
resource |
---|
unpack001/HardStory.exe |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE