image_73NWQDS9JH2C.zip
- SHA256 cd09b1dac18ff6247dab33535ed3d9746027fa75576f74f506e7fea4edaba0fa
Static task
static1
Behavioral task
behavioral1
Sample
S41CF.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
S41CF.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
libcef.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
libcef.dll
Resource
win11ltsc2024-20260911-en
Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.
| resource |
|---|
| unpack002/libcef.dll |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack002/libcef.dll |
Aug 6, 2020
CN=JetBrains s.r.o.,OU=SOFTWARE,O=JetBrains s.r.o.,L=Praha,ST=Praha,C=CZ
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US
Aug 6, 2020
CN=JetBrains s.r.o.,OU=SOFTWARE,O=JetBrains s.r.o.,L=Praha,ST=Praha,C=CZ
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US
count=18, id=260, version=25711,
count=11, id=259, version=25711,
count=170, id=261, version=25711,
count=8, id=259, version=24123,
count=57, id=261, version=24123,
count=36, id=260, version=24123,
count=2, productName=Unmarked objects (old),
count=3, id=257, version=25711,
count=222, id=1, productName=Unmarked objects,
count=123, id=261, version=24234,
count=1, id=255, version=24234,
count=1, id=258, version=24234,
DLL Hijacking vulnerability
Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.
Unsigned PE
Checks for missing Authenticode signature.