Main
Save
Behavioral task
behavioral1
Sample
507e9dc7b9c42f535b6df96d79179835.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
507e9dc7b9c42f535b6df96d79179835.dll
Resource
win10v2004-20220812-en
Target
507e9dc7b9c42f535b6df96d79179835.dll
Size
126KB
MD5
507e9dc7b9c42f535b6df96d79179835
SHA1
acf41fb549750023115f060071aa5ca8c33f249e
SHA256
3b82a0ea49d855327b64073872ebb6b63eee056e182be6b1935aa512628252af
SHA512
70907ec4c395b0d2219bfe98907ec130bfcbc6d4bec7bd73965a9b1e422553e27daaead3d6647620fcf5392d85a2e975bce0f7c79c0bc665dd33ce65f7d44302
SSDEEP
3072:Yx7pOYzBekK3tiINwyP7XSSJds3zhrjPcnqULv4G9:Yx7ZNhK3vwyOztPc3L
Processes:
resource | yara_rule |
---|---|
sample | amadey_cred_module |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Main
Save
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ