packagecache_x64_data.zip
- SHA256 026914e2fc0e2b652e07862f5761299e3839f43bff65d43b14449c54d29978bd
Static task
static1
Behavioral task
behavioral1
Sample
packagecache_x64_data.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
packagecache_x64_data.exe
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral3
Sample
packagecache_x64_data.exe
Resource
win11-20260911-en
Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.
| resource |
|---|
| unpack001/borlndmm.dll |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/borlndmm.dll |
DLL Hijacking vulnerability
Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.
Unsigned PE
Checks for missing Authenticode signature.
count=137, id=261, version=33145,
count=12, id=260, version=33145,
count=6, id=259, version=33145,
count=9, id=259, version=35721,
count=15, id=260, version=35721,
count=31, id=261, version=35721,
count=3, id=257, version=33145,
count=110, id=1, productName=Unmarked objects,
count=1, id=265, version=36256,
count=1, id=256, version=36256,
count=1, id=258, version=36256,
Aug 22, 2022
CN=ACCA software S.p.A.,O=ACCA software S.p.A.,L=BAGNOLI IRPINO,ST=AVELLINO,C=IT
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US