CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b80fe856cc89798f0bcd1c8b259201f66bf79ddb3389d3b3b92d093a7486a7b7.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b80fe856cc89798f0bcd1c8b259201f66bf79ddb3389d3b3b92d093a7486a7b7.dll
Resource
win10v2004-20220901-en
Target
b80fe856cc89798f0bcd1c8b259201f66bf79ddb3389d3b3b92d093a7486a7b7
Size
109KB
MD5
6d92f766202d08c922e431f4c8e5e930
SHA1
11f997a79bc5e50b14fce995c5af78c6ff38d497
SHA256
b80fe856cc89798f0bcd1c8b259201f66bf79ddb3389d3b3b92d093a7486a7b7
SHA512
98b31deb85a542e4d8a6c66a94fd20a3111ec335b20150c828447a1d9c397d876277dded206a1df9c24df29bc35bff8a2a0399a93446b6b7ddb832f402d70156
SSDEEP
1536:Zn4Mi33LS7enDxBUeJt4XnaUFWGju5ZKjToz6LYLQFejlOkjzAX0:Zfi3b8enD3UkTUkTZeTU6LY8Fejzj8X0
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE