extra
follower
run
scub
Behavioral task
behavioral1
Sample
ef37aa053b8b86c089bfb95871511820N.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ef37aa053b8b86c089bfb95871511820N.dll
Resource
win10v2004-20240802-en
Target
ef37aa053b8b86c089bfb95871511820N.exe
Size
72KB
MD5
ef37aa053b8b86c089bfb95871511820
SHA1
84b530565a0d6d84a96bd2a8ec89174dff77311d
SHA256
5decad758ad23f90ceafd132702935d4feb17a77859bbd2d6573f00e1d3180f1
SHA512
658350af7c46eae8bbfbf0aa4d78580a0efb7e908ef9c5a200c9d3cacc8a51c03930407bb5a1da86fc1ab58ca8bc4fd729a650ded220ce188c456b57cff82c5c
SSDEEP
1536:ozhHuRqOoGc2WsV/bWM5wpokf8m1eTWfk:ozhHuRooWM5wBkmHf
Detects Latrodectus v1.4.
resource | yara_rule |
---|---|
sample | family_latrodectus_1_4 |
Checks for missing Authenticode signature.
resource |
---|
ef37aa053b8b86c089bfb95871511820N.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PeekNamedPipe
GetLastError
CreateMutexW
MessageBeep
MessageBoxA
extra
follower
run
scub
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ