Main
Save
Behavioral task
behavioral1
Sample
5aff860634fadee66a6e8220e67f7ebc88bfcde7a905a2753655706c0252afd1.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5aff860634fadee66a6e8220e67f7ebc88bfcde7a905a2753655706c0252afd1.dll
Resource
win10v2004-20220812-en
Target
5aff860634fadee66a6e8220e67f7ebc88bfcde7a905a2753655706c0252afd1
Size
67KB
MD5
48e48cb51757402f9ded57070754c661
SHA1
755376768eac01e25bd87e50c602a062699d4675
SHA256
14840382182c94d6000b242f353b4d1eba235f7a645dfd943c4c9d2c93a80e3e
SHA512
b4ccefd9c63a4e0348377c0d24ddce1b7126a9aef60ee61732b59e25d539e51d7939af359b6cf2bd11358e3105714acec24432390262bd21ddf4b3e2494edcdd
SSDEEP
1536:ElydJqpkUTl5tWf7iC0xmXN/MVvVCtt75ZIh7hrtkHunM:EogkM6B0xm9OUtPuHSOM
resource | yara_rule |
---|---|
static1/unpack001/5aff860634fadee66a6e8220e67f7ebc88bfcde7a905a2753655706c0252afd1 | amadey_cred_module |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Main
Save
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ