3872c12d31fc9825e8661ac01ecee2572460677afbc7093f920a8436a42e28ff.zip
- SHA256 04ba993c7912fc739b16c970bc7d83b47340bb67acd5f5c54dfff4cd950e2fe9
Behavioral task
behavioral1
Sample
3872c12d31fc9825e8661ac01ecee2572460677afbc7093f920a8436a42e28ff.exe
Resource
win11ltsc2024-20260911-en
| resource | yara_rule |
|---|---|
| static1/unpack001/3872c12d31fc9825e8661ac01ecee2572460677afbc7093f920a8436a42e28ff.exe | family_killmbr |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/3872c12d31fc9825e8661ac01ecee2572460677afbc7093f920a8436a42e28ff.exe |
Detects KillMBR
Unsigned PE
Checks for missing Authenticode signature.
count=15, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=64, id=1, productName=Unmarked objects,
count=5, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,