CreateTextEffect
FolderWatch
GetPlugInInfo
IVLoadImage
LoadResourceImage
ScanResourceImages
Behavioral task
behavioral1
Sample
c5ab50f7d41c5c2815fe27af9a9224ba63f50a199f1ed81d386832d79987d111.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c5ab50f7d41c5c2815fe27af9a9224ba63f50a199f1ed81d386832d79987d111.dll
Resource
win10v2004-20220812-en
Target
c5ab50f7d41c5c2815fe27af9a9224ba63f50a199f1ed81d386832d79987d111
Size
177KB
MD5
6410631397a21d2d8e3bc4d3a2ab3a70
SHA1
cfe8e076abc52dfbc5cb5070f11c0e654896676d
SHA256
c5ab50f7d41c5c2815fe27af9a9224ba63f50a199f1ed81d386832d79987d111
SHA512
3d8b2e97e0e470140680e8bfa7856ae2e887a0f4aa7d400467c90c87bd704fa7557fdc433f4adf60ef9f7c76e269dae2b0364c08283ddef0e14e18210f795e54
SSDEEP
3072:NKO+hckvZ69jIzs4veakcdgWvxvPPwgwtelAhHpReHVN86FbHSw3E:NKthXh69jI7ve/f8xHPwtYlIEfbHF
resource | yara_rule |
---|---|
sample | upx |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CreateTextEffect
FolderWatch
GetPlugInInfo
IVLoadImage
LoadResourceImage
ScanResourceImages
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE