InitHelperDll
Test
_cgo_dummy_export
Behavioral task
behavioral1
Sample
6a940000.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
6a940000.dll
Resource
win10v2004-20240802-en
Target
6a940000.dll
Size
6.7MB
MD5
1aae9b87fd38aca1bd9d96cb323d8bff
SHA1
147dbf0afb9b91870fa9998aca7dcb133ae60785
SHA256
03bb8c770fae54ff4c2d222c539d535259949a311fd25256529d35160cc03279
SHA512
1746c73771368e67465e227ae143f6da3cc4e6b55a18cba7f192291758230beafbace223b001bdd00c126cbf7112277c2c692ec96f36a03ac1d23b44202ed931
SSDEEP
49152:IrlOSQ/M/3jd/Sph054PjTV3924lGzn//5RMSdvxtH16SnDHNPwaETT13k5EH5cm:BS3jd/KZbvM79Ln3EH5DP
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6a940000.dll |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
InitHelperDll
Test
_cgo_dummy_export
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE