Rich Headers: a leveraging this mysterious artifact of the PE format
Show in Graph
Image Description
Common Information
Type Value
UUID 427a48c2-655c-4576-9ac9-5165037529ed
Fingerprint 6bd823fcadf232756402393c1c5f059a945a04f81ce242ea747eacd43ed4858a
Analysis status DONE
Considered CTI value 0
Text language
Published Oct. 9, 2019, 3:07 p.m.
Added to db April 16, 2024, 8:26 p.m.
Last updated Aug. 31, 2024, 12:18 a.m.
Headline Rich Headers: a leveraging this mysterious artifact of the PE format
Title Rich Headers: a leveraging this mysterious artifact of the PE format
Detected Hints/Tags/Attributes 43/2/17
Source URLs
Redirection Url
Details Source https://www.virusbulletin.com/uploads/pdf/conference_slides/2019/VB2019-KalnaiPoslusny.pdf
URL Provider
Details Provider Source level domain
Details virusbulletin.com www.virusbulletin.com
Attributes
Details Type #Events CTI Value
Details Domain 6 
eset.cz
Details Domain 1 
prikormka.bf
Details Email 3 
peter.kalnai@eset.cz
Details Email 2 
michal.poslusny@eset.cz
Details File 1260 
explorer.exe
Details File 1 
ipkxp4.dll
Details File 1 
y9s9ow.dll
Details File 1 
videolan.exe
Details File 11 
10.exe
Details File 2 
rds.dll
Details File 2 
res.dll
Details File 2 
zlib_x86.dll
Details File 2 
zlib_x64.dll
Details File 5 
gpj.exe
Details File 1 
etwdrv.dll
Details File 3 
lcrpsdnew.dll
Details File 1 
loadcryptpsd.dll