_�����ӳ���
mesige
����˳ͼ
�����ƶ�
����
����
����1
����2
����3
����4
����
Behavioral task
behavioral1
Sample
dbc80fa491032d0e683d958774069ea54b23634e1c2fd92d996a189014fec505.dll
Resource
win7-20220812-en
Target
dbc80fa491032d0e683d958774069ea54b23634e1c2fd92d996a189014fec505
Size
906KB
MD5
2bc0a4d401370eed2c3ba96527f33e80
SHA1
fdf1cb041b445aaef9ebad3fbabd0df7a55eb34b
SHA256
dbc80fa491032d0e683d958774069ea54b23634e1c2fd92d996a189014fec505
SHA512
036005c1eb848287d2d238bee5442eca8295f58eb5cc5df428f2cfbdab64695e44ed0f32a1874cfac5c1468d59ab5979404f6c8154bedf13fbc8fd85d0c5b484
SSDEEP
12288:G9rRTw/ZGlnAU9oG9dpfhWuEXzdHC4KJj4bIjAI0SYg08kXnt+x8EtR8Os2BYIPi:aJQCnJ9FzpfY5CF1AIyoGEtTdri
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
_�����ӳ���
mesige
����˳ͼ
�����ƶ�
����
����
����1
����2
����3
����4
����
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE