CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b4af92aebaf5f8d3f9f007f43c7fc7e2e3ec1d5a4aae1d58e611451eae1c52f4.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b4af92aebaf5f8d3f9f007f43c7fc7e2e3ec1d5a4aae1d58e611451eae1c52f4.dll
Resource
win10v2004-20220901-en
Target
b4af92aebaf5f8d3f9f007f43c7fc7e2e3ec1d5a4aae1d58e611451eae1c52f4
Size
89KB
MD5
68bd2c2ff30b376704ff531eaaecd22c
SHA1
a9323b23f03e1d7a734f892c18ee2a21c982cd87
SHA256
b4af92aebaf5f8d3f9f007f43c7fc7e2e3ec1d5a4aae1d58e611451eae1c52f4
SHA512
5b3426e62c678feb4c6d9a42862f8dc0c29a10db7c7019266ec6dd2b93954442e5c7f031e0be0d2a34b77f343489b1c46958aa5c2e4197e705657adbe422477c
SSDEEP
1536:QPHd2owFn+G5mAGHnWauBiHub39+Tv/cLJr4eQ/KhVqTbr:QP9hwdmPnW5uuJ2vWroKhM
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE