CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b109f29dc097275d99c4e49bc6a131bbfcd470a07e88d1df813c18ad82a1d449.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b109f29dc097275d99c4e49bc6a131bbfcd470a07e88d1df813c18ad82a1d449.dll
Resource
win10v2004-20220901-en
Target
b109f29dc097275d99c4e49bc6a131bbfcd470a07e88d1df813c18ad82a1d449
Size
90KB
MD5
9666b666974a129c3b4727feec926b3c
SHA1
d7277f0f5772941bb72de49a9e1036d3a3fcea1d
SHA256
b109f29dc097275d99c4e49bc6a131bbfcd470a07e88d1df813c18ad82a1d449
SHA512
d8e0caaa0a459e515d938c9f1fd8cbe49be38b20dd6e5287f6d1adb860c7c2bd50158cb2e77affb10402e37f8206421c8d6a60090c7842d203df737f5a23cfe6
SSDEEP
1536:/xLK2OReR3CHuxtF3wj6/32nQg1Pweef1LpEIjvsejjpTyx:ZVOReRyHuHuw2Qg1oewRpDvsejjUx
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE