CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
Setup
SysLogoff
SysLogon
Behavioral task
behavioral1
Sample
b4ad2d679a79ff2419f71b43653823f896e015541d144836d56630c779a2398b.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b4ad2d679a79ff2419f71b43653823f896e015541d144836d56630c779a2398b.dll
Resource
win10v2004-20220901-en
Target
b4ad2d679a79ff2419f71b43653823f896e015541d144836d56630c779a2398b
Size
275KB
MD5
0bd20437282888fdd1c0e879d4aa20ef
SHA1
8e4472e0871c9c64c7dbdf8c1956c36374ebc3e2
SHA256
b4ad2d679a79ff2419f71b43653823f896e015541d144836d56630c779a2398b
SHA512
71a81c50083c9cd60b3c7b65b2c918ff7bf6d8129b8eb6270dd58df20d01f2c7e37ec8f0605fe2f6d32bd122c19a0a35a91630da6857621bcc4bf0cfa860b7c0
SSDEEP
6144:xGuDHL+zDva91yu4aW+pCrJRdw2AJYcoeKMNGQnt8:5D6PvubCSCO2ikeKM0Qnt8
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
Setup
SysLogoff
SysLogon
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ