CancelDll
LoadDll
Behavioral task
behavioral1
Sample
2420f8cc04b41688f5aacbfe9dbb0d7ef784389c59a5f8db5587723fa30fddfe.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2420f8cc04b41688f5aacbfe9dbb0d7ef784389c59a5f8db5587723fa30fddfe.dll
Resource
win10v2004-20220901-en
Target
2420f8cc04b41688f5aacbfe9dbb0d7ef784389c59a5f8db5587723fa30fddfe
Size
97KB
MD5
927a2cc7dce80f06c8a5e8ef077b9803
SHA1
cda2d7579d32c3e4150987245f136cb46a2e3a00
SHA256
2420f8cc04b41688f5aacbfe9dbb0d7ef784389c59a5f8db5587723fa30fddfe
SHA512
be908804075b8e1384846bc6f6391bd2dc8b235c2dbbd5278ff955a8c586dd5e0adf15fb7b906eebe736cc34926901939a560ba4bfd6ed1b2bdf20793164ffc2
SSDEEP
1536:Zn4Mi33LS7enDxBs68a0dhU1Dv8SVMNTFBWXuCaOuxpMXq/:Zfi3b8enD3pP0bU1T8rGuCOqXq/
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE