DllCanReloadNow
DllUnregisterServerA
Behavioral task
behavioral1
Sample
efcac07fa6a6534b7918d2e81f25b01dfaf704586145da50aeb8fe60c1fee8f9.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
efcac07fa6a6534b7918d2e81f25b01dfaf704586145da50aeb8fe60c1fee8f9.dll
Resource
win10v2004-20220812-en
Target
efcac07fa6a6534b7918d2e81f25b01dfaf704586145da50aeb8fe60c1fee8f9
Size
52KB
MD5
6537b58602a1ab94220fd82669d43955
SHA1
2421c955a3ed429f64970ab10560ea5feaceadb9
SHA256
efcac07fa6a6534b7918d2e81f25b01dfaf704586145da50aeb8fe60c1fee8f9
SHA512
49f0ae8025f418d98182cc9795e533e6637b57a38e940fc1e1d622829270f97cfd4193ef07292ef3e04027ae5c871dd7404259ef970593ad9454eae92d3b42a9
SSDEEP
768:viJr4Rtx9H4/wniv25cnTP0SHG26uLn+dlvYXJlaj/9VlWfAP04RS5cfj1o:v4r4774/VJTsSHb8HTM35cf5o
resource | yara_rule |
---|---|
sample | upx |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
DllCanReloadNow
DllUnregisterServerA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE