CallBack
DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
Init
Behavioral task
behavioral1
Sample
55acb487255f518bbf67f67c52f287f8bb68b0f3d43a9758785414ec6b86977e.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
55acb487255f518bbf67f67c52f287f8bb68b0f3d43a9758785414ec6b86977e.dll
Resource
win10v2004-20220901-en
Target
55acb487255f518bbf67f67c52f287f8bb68b0f3d43a9758785414ec6b86977e
Size
95KB
MD5
4445ef1dcdb2d6f7cf5bb4f6f771b200
SHA1
4b308319739bc2b29d83b18ca9d2d01b37778ce9
SHA256
55acb487255f518bbf67f67c52f287f8bb68b0f3d43a9758785414ec6b86977e
SHA512
2acea7c1aa6727b33a5ef1708d476077a4a36aa117bc0ee4ae988818bd91de98359f7a12b3ed6334f1f89d717830c1b6bb8e02f93e91372da27172c76331808e
SSDEEP
1536:2txOpabjbEtiKtRzVtVWmy1h2cFrQh4QG8JGVmMh6GnITIv/Ru8tk7q+i4lCatCS:2tBXujVfWmGh/RgW+MoLT8J3ithdl
resource | yara_rule |
---|---|
sample | upx |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
CallBack
DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
Init
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ