CancelDll
LoadDll
Behavioral task
behavioral1
Sample
fb06d2da5a9386c7577b933a485a3b99a2d71038b5c8e84fa231d881600be9a8.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fb06d2da5a9386c7577b933a485a3b99a2d71038b5c8e84fa231d881600be9a8.dll
Resource
win10v2004-20220812-en
Target
fb06d2da5a9386c7577b933a485a3b99a2d71038b5c8e84fa231d881600be9a8
Size
138KB
MD5
60ac18df37042385e0024a3bae0f70fd
SHA1
20510ee30f1fa96ab3ac2d32956f12efbcab2414
SHA256
fb06d2da5a9386c7577b933a485a3b99a2d71038b5c8e84fa231d881600be9a8
SHA512
da666fa35221f4bd086e22944e1e2674df3e45caf0745104db22c20bbc0447948646a66c4b353ca9d972e2caa1724cfc5e585dcf76d13670ab7f73e7f99c3553
SSDEEP
3072:l9L1xm6hpbVcEGPZg5d/jU4MIBgIsXA0YAaV948PI9Lj2P2:hnhppITgAXAbAaV94L9mP2
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE