Anomalous binary characteristics Show sources
| static_pe_anomaly | Actual checksum does not match that reported in PE header |
Creates RWX memory Show sources
| injection_rwx_memory | 0x00000040, NtAllocateVirtualMemory or VirtualProtectEx |
Executed a process and injected code into it, probably while unpacking Show sources
| code_injection | 90bd16fa5ceffcf3e26ebb8891494b5245005df1.exe(1380) -> 90bd16fa5ceffcf3e26ebb8891494b5245005df1.exe(2180) |