CancelDll
LoadDll
Behavioral task
behavioral1
Sample
af0f560a090fb8e59a3cd9c3de7c519814d35bc421d8ab9c60238f131ef92be0.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
af0f560a090fb8e59a3cd9c3de7c519814d35bc421d8ab9c60238f131ef92be0.dll
Resource
win10v2004-20220901-en
Target
af0f560a090fb8e59a3cd9c3de7c519814d35bc421d8ab9c60238f131ef92be0
Size
86KB
MD5
a0978515f6eed2961dec72923eec0784
SHA1
8027504976a60d794d30fb0eb68741718392e164
SHA256
af0f560a090fb8e59a3cd9c3de7c519814d35bc421d8ab9c60238f131ef92be0
SHA512
48e9301c01d6eae4363d5d9fe7d8e4cacbb4f3816ca5fef7e42a79b23026308b2fecddbefea03c06e3c6d40e485c5eda12a05d6dd2fb00ea592d45adc70d64ec
SSDEEP
1536:SAVJ0mWeB/iU9sgbPtcv0ayd9nfQusM8lZvMf8uKXxq9qbWhZ:zJ0mW8/iZgav0r9fQtM8lZvz9XxriZ
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE