cod2x-windows.zip
- SHA256 c33f52037e67eaa948746a93967d27d8c70ab58623abab48d07803600a6a8555
Static task
static1
Behavioral task
behavioral1
Sample
mss32.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
mss32.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
mss32_original.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
mss32_original.dll
Resource
win11ltsc2024-20260911-en
Embeds OpenSSL, may be used to circumvent TLS interception.
| resource | yara_rule |
|---|---|
| static1/unpack001/mss32.dll | embeds_openssl |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/mss32.dll |
| unpack001/mss32_original.dll |
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=29, productName=VS2002 (.NET) build 9466, version=9466,
count=26, id=64, productName=VS2002 (.NET) build 9466, version=9466,
count=107, id=28, productName=VS2002 (.NET) build 9466, version=9466,
count=7, id=25, version=9210,
count=136, id=1, productName=Unmarked objects,
count=1, id=18, version=8444,
count=25, id=44, version=9466,
count=1, id=63, productName=VS2002 (.NET) build 9466, version=9466,
count=1, id=69, productName=VS2002 (.NET) build 9466, version=9466,
count=1, id=61, productName=VS2002 (.NET) build 9466, version=9466,