CancelDll
LoadDll
Behavioral task
behavioral1
Sample
1b53d7f77e1b9f14039a1450791d5905451f1ba68bb4046e328815c3184a2f7f.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1b53d7f77e1b9f14039a1450791d5905451f1ba68bb4046e328815c3184a2f7f.dll
Resource
win10v2004-20220812-en
Target
1b53d7f77e1b9f14039a1450791d5905451f1ba68bb4046e328815c3184a2f7f
Size
75KB
MD5
4874e1cf1a943186bc67f822537a32dc
SHA1
e9916f86329ef9fb7ea853d701deee4a8883414e
SHA256
1b53d7f77e1b9f14039a1450791d5905451f1ba68bb4046e328815c3184a2f7f
SHA512
f1695e6a2e01fd618c5462b36b16b8b1eb58d798c995c965f0e7f73c098feae8aa37513031cc84a7ce25981b05e67085e226b5719a0fc4f8e7e6ec618bc65af8
SSDEEP
1536:SAVJ0mWeB/iU94x6Eacryq0nYAUVrCsLpfKL/s8oRe0XVt2:zJ0mW8/i8Eawyq3AsPLoL/86
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE