GetSkillName2
StartAutoPotionBlue
StartAutoPotionRed
StopAutoPotionBlue
StopAutoPotionRed
Behavioral task
behavioral1
Sample
26b1684e156774a03ab696ea48429da8a37afdd8cc95fc4cc64e2036d50ea496.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
26b1684e156774a03ab696ea48429da8a37afdd8cc95fc4cc64e2036d50ea496.dll
Resource
win10v2004-20220901-en
Target
26b1684e156774a03ab696ea48429da8a37afdd8cc95fc4cc64e2036d50ea496
Size
65KB
MD5
4fd8ad1899f8f6ef7fdb46d9a612e01d
SHA1
3f47717d7b09aa9507b0a55dba21c9901169f1b5
SHA256
26b1684e156774a03ab696ea48429da8a37afdd8cc95fc4cc64e2036d50ea496
SHA512
46c983980ec5d1984fa0bf8377fa8beb9e35d98ad182f94cef869d692b4ed13bd827a6e54581f1dfc0afc23f95eb143e013f9fe31aba3b33b3015e7b4dc31492
SSDEEP
1536:BYMNFQ7ud6Dh3WfsqB55ygcirqrO4M8TLdAC8BI6p8hN:BYgQm6x4hyWilTZApAN
resource | yara_rule |
---|---|
sample | upx |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetSkillName2
StartAutoPotionBlue
StartAutoPotionRed
StopAutoPotionBlue
StopAutoPotionRed
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE