_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
b4506ff88bb8bc6cfb8eeb9da6991e009fbd99e393c132604cfb50d15b209438N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b4506ff88bb8bc6cfb8eeb9da6991e009fbd99e393c132604cfb50d15b209438N.dll
Resource
win10v2004-20240802-en
Target
b4506ff88bb8bc6cfb8eeb9da6991e009fbd99e393c132604cfb50d15b209438N.exe
Size
118KB
MD5
eae8fbfe3746e73089d4301f762e3970
SHA1
5e5da4c2f64a1f57e524bcf9d81f58154ef9bbf6
SHA256
b4506ff88bb8bc6cfb8eeb9da6991e009fbd99e393c132604cfb50d15b209438
SHA512
6510efddf29afd8af9343b48c364499972944871be36300353d72d7e13f8c23c764d9ab0826c233868470e1e29e6ee107b280570f2dcec54dd5b6423aed5f1d1
SSDEEP
1536:78DDS7LFiLjnavBSsOnOonMaPJtSNBeAt94nouy8Af206g:eIFYjnav4bnOAMaWeAt2outKG
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b4506ff88bb8bc6cfb8eeb9da6991e009fbd99e393c132604cfb50d15b209438N.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE