Warden (1).rar
- SHA256 88f23b7a9d50364fbde39ff9ccb63a8b43e9418fa78a7e79cd59fb6d98fe0669
Password
01011
Behavioral task
behavioral1
Sample
Warden.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
Warden.exe
Resource
win11ltsc2024-20260911-en
DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.
| resource | yara_rule |
|---|---|
| static1/unpack001/Warden.exe | family_donutloader |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/Warden.exe |
Detects DonutLoader
Unsigned PE
Checks for missing Authenticode signature.