CancelDll
LoadDll
Behavioral task
behavioral1
Sample
91e72c0034e40a28291b59eb5736872d9f0e7bba3baab9431d92ba5ed9b03192.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
91e72c0034e40a28291b59eb5736872d9f0e7bba3baab9431d92ba5ed9b03192.dll
Resource
win10v2004-20220901-en
Target
91e72c0034e40a28291b59eb5736872d9f0e7bba3baab9431d92ba5ed9b03192
Size
97KB
MD5
6958bfa1926ab59b0c1c1f104dac95cd
SHA1
972f34d73d7bc3e039b1084958de5f6b6303cb2a
SHA256
91e72c0034e40a28291b59eb5736872d9f0e7bba3baab9431d92ba5ed9b03192
SHA512
1e705fef55267b789ac4f4cc045c1bc8a58d49a5ad1ebbe39d8467497c294f24fd570573f94ee36e1b853399f98458094f6c62e692eb0dfd0bf8412d9d3ebe6a
SSDEEP
1536:i64W3b/+sHTUxLu325tQcxORYejYcb4RMYjlc5TSDJ0Y5wb99vSNwk:1b/+sH+HWjYcbx5T2T49FS/
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE