CancelDll
LoadDll
Behavioral task
behavioral1
Sample
38f82cbe2113ea53a3c86047597bbf2addfbad342fdd2b99dcc5bf94ac400da8.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
38f82cbe2113ea53a3c86047597bbf2addfbad342fdd2b99dcc5bf94ac400da8.dll
Resource
win10v2004-20220812-en
Target
38f82cbe2113ea53a3c86047597bbf2addfbad342fdd2b99dcc5bf94ac400da8
Size
105KB
MD5
4e170f4220b25b395454a039ccc85365
SHA1
71cfd383d6ea1f6665b70468c6482f2c75bbe2c5
SHA256
38f82cbe2113ea53a3c86047597bbf2addfbad342fdd2b99dcc5bf94ac400da8
SHA512
c3be55ce7d1a5cdcb3516463f33c66a2e6ce719a1710a7ff2dfb13b00ebe72bab9b8f2db2ff21d7f2798f260093fc7d82eb9300e36dacaa0e76e56614d854055
SSDEEP
3072:f2RWdNEp4Ls2V+iPjgwRKT24QsMhseH9++tLl51o2:f2RWdNEqg0+7SKTF0THU+th51V
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE