mymain
nomain
Behavioral task
behavioral1
Sample
097f1b0f05b8ceebe3c5d9bc2650be8acf23e615bb5641cc2fcf02352f4cb27fN.dll
Resource
win7-20240903-en
Target
097f1b0f05b8ceebe3c5d9bc2650be8acf23e615bb5641cc2fcf02352f4cb27fN.exe
Size
30KB
MD5
e9137263b5e283ae2c1244ecef3e2900
SHA1
0bfa6e10f4891a8b204d222ab1a0bd83d1402bdf
SHA256
097f1b0f05b8ceebe3c5d9bc2650be8acf23e615bb5641cc2fcf02352f4cb27f
SHA512
ccdc4a40494f5c8670465543798322d701c9998730392faee7cad41a4f41689dd179e58db6f977bdefbee1dcb763f6a84698f51927b12002e040f70bc98dd0ce
SSDEEP
768:D7Kbafjo2EskwUtZa+uCOoghIvdVvJ4WbMWaSmQCxZekyUxEBctqA:D7UyjoJtkT5ozvJLbMaRCxMxLA
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
097f1b0f05b8ceebe3c5d9bc2650be8acf23e615bb5641cc2fcf02352f4cb27fN.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
LoadLibraryA
GetProcAddress
mymain
nomain
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE