CancelDll
LoadDll
Behavioral task
behavioral1
Sample
8556f94bb8519e2d08a9b7a3603fb75be680929250a3da4c75f4c4fc87938a8a.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8556f94bb8519e2d08a9b7a3603fb75be680929250a3da4c75f4c4fc87938a8a.dll
Resource
win10v2004-20220812-en
Target
8556f94bb8519e2d08a9b7a3603fb75be680929250a3da4c75f4c4fc87938a8a
Size
136KB
MD5
91c5e4a6aa1f5fb4ec450fbc0d47ebcc
SHA1
cd0e2b74d4101e6d877095889ebee2c5c5f72839
SHA256
8556f94bb8519e2d08a9b7a3603fb75be680929250a3da4c75f4c4fc87938a8a
SHA512
ba99d06b89510a41dc3e7ce15cad3090caf66b18f74bfe9a06dd911f3215ac231314b81c54b6a313070eccc1d9bfca7a746e7331709ad4c26550108c2215c9d1
SSDEEP
1536:6Rw9k6k1FrHc5RqbSBxLYRwKUvBcdBlv4Py+OZHfC6+dYvnc97a:/cHr8mbSBx8Rzv7l+O45dYf2+
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE