VDMEnumTaskWOWEx
VDMTerminateTaskWOW
WSPStartup
Behavioral task
behavioral1
Sample
6a8bc1409ac0863d328f89f508b89175ae6bb84f454ecab23b22d83565ecf28c.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6a8bc1409ac0863d328f89f508b89175ae6bb84f454ecab23b22d83565ecf28c.dll
Resource
win10v2004-20220812-en
Target
6a8bc1409ac0863d328f89f508b89175ae6bb84f454ecab23b22d83565ecf28c
Size
24KB
MD5
a246551f47e1508b91ea8cd88ca86f10
SHA1
708bc7880c16268762ca97db833c9a8ab92b5cfa
SHA256
6a8bc1409ac0863d328f89f508b89175ae6bb84f454ecab23b22d83565ecf28c
SHA512
d70cee2dda1a53def5978ece6647b974fbaa2031d87f58a2f10f71eaa2bd06957b15b7854d50e217ff84167281d7a268e0e22dcbce6ffb6ad9542b3f191c608c
SSDEEP
192:LO35YZJBjYnnIXvK3DVbJmusR0OJ5NOhEDLsWavkVkOOgy56lHn9HHEoYejarZmh:LoMJgWKms25+OOT56l2oYejd4R
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
VDMEnumTaskWOWEx
VDMTerminateTaskWOW
WSPStartup
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE