������Ϣ
�ļ�_��Сת��
Behavioral task
behavioral1
Sample
afd21a6cdded9a1cdea1414c05a988bc39455ae5e8eda776e02aba5e84ff3e9e.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
afd21a6cdded9a1cdea1414c05a988bc39455ae5e8eda776e02aba5e84ff3e9e.dll
Resource
win10v2004-20240802-en
Target
afd21a6cdded9a1cdea1414c05a988bc39455ae5e8eda776e02aba5e84ff3e9e
Size
696KB
MD5
7fa303d222d7dd9e3404f6ab0e1d9444
SHA1
ae2fddcef9839b71be6049360309729cc007a728
SHA256
afd21a6cdded9a1cdea1414c05a988bc39455ae5e8eda776e02aba5e84ff3e9e
SHA512
b61fc1bbd8dd68cf6d927a801818d8f44f479a60f76bca92edc333c06704cb0c99546dbe224fa9675c2be11304a960061abbcd42bb4cb765d687ce32984f445a
SSDEEP
12288:BJ3fF2i74Qz5l5lw0fcczxLKMJB4fvHxnl4Gt1wT+e5wCOU4hCtY/S:BJ3fF2iMQz5l5lw0fcczxLKMJB4fvHxC
resource | yara_rule |
---|---|
sample | family_blackmoon |
Checks for missing Authenticode signature.
resource |
---|
afd21a6cdded9a1cdea1414c05a988bc39455ae5e8eda776e02aba5e84ff3e9e |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
������Ϣ
�ļ�_��Сת��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ