el
el2
em
foo
mr
mr2
ti
un
Static task
static1
Behavioral task
behavioral1
Sample
a1208a8780710bd402bce56f96b15d8d4b5dc9a2d7665428aa2eb206e4d48e33.dll
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
a1208a8780710bd402bce56f96b15d8d4b5dc9a2d7665428aa2eb206e4d48e33.dll
Resource
win10v2004-20220414-en
Target
a1208a8780710bd402bce56f96b15d8d4b5dc9a2d7665428aa2eb206e4d48e33
Size
251KB
MD5
31268c12e5ca4a4a09aeebcddf7ded1d
SHA1
13cebb7adef1dc72d64d8707abfb7a87a686356c
SHA256
a1208a8780710bd402bce56f96b15d8d4b5dc9a2d7665428aa2eb206e4d48e33
SHA512
800768d0d9c1e81531b5d4da6eb3b94607c21863f102a6d04c6e8892fb2a00137e01538a73f0720570509336268b45d05de856184321f15cf3d72e8062ebd90f
SSDEEP
6144:1k6aFZRtqC4rNZ4z5OwB0wHPV5lFC5TRoSV:7aHRAC4rD4z5OWV5nC1RoSV
Processes:
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
el
el2
em
foo
mr
mr2
ti
un
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE