CancelDll
LoadDll
Behavioral task
behavioral1
Sample
bba6e7714aa2472103b746ab7181cfda6cfe77c724d504bf3e9384619682798e.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bba6e7714aa2472103b746ab7181cfda6cfe77c724d504bf3e9384619682798e.dll
Resource
win10v2004-20220812-en
Target
bba6e7714aa2472103b746ab7181cfda6cfe77c724d504bf3e9384619682798e
Size
88KB
MD5
80cb851e5392efed1fd3b8eb2f8e49cb
SHA1
d5bbdb17e417d15783068467337cb1d18274738a
SHA256
bba6e7714aa2472103b746ab7181cfda6cfe77c724d504bf3e9384619682798e
SHA512
883f77e4a481cc86c2c42ae0ac51795aa3bc23af80e9d00fcf7e85f41552b2466ad8a2cd8aa7537afa3300cfbb84e4e59c9bd0a75fa07e75f33a4f4eb8635c0d
SSDEEP
1536:qWNTI2j7IGPmy5guIRpLYYEEz3dy0h6ck1gbjEo5vlaYPicZ:qWNTHTey5HCROEz3AshjEoXaYPZZ
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE