_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
4062cb85b483679ff1f13365cc4cb5095b3f0c6f48aec01e9c821cf553a2c178N.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4062cb85b483679ff1f13365cc4cb5095b3f0c6f48aec01e9c821cf553a2c178N.dll
Resource
win10v2004-20240802-en
Target
4062cb85b483679ff1f13365cc4cb5095b3f0c6f48aec01e9c821cf553a2c178N
Size
136KB
MD5
df990509a98bf818773f81f2c33e3e00
SHA1
ee3491465224fc13301ef236e0da3b723f41782f
SHA256
4062cb85b483679ff1f13365cc4cb5095b3f0c6f48aec01e9c821cf553a2c178
SHA512
3bab5ef7e480403332270df5b8c1e1f4c9ef48c852fc7db738a57ab610578053ef0513b96ade60b2dcf97a88f2e706b5b9dc69f98e7115e78d87b5a3ac1be732
SSDEEP
1536:BsVVVHum9qaUXIkqgOL9AkYGvbiQdcghUYjtK8fMJ/nouy8mKozzx:sVH9qFVkYiOUtk8fMFoutmKoz
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4062cb85b483679ff1f13365cc4cb5095b3f0c6f48aec01e9c821cf553a2c178N |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE