CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b3396b5170c82b408d10ff7a2855a6afcfb43b28f9bb2ba36d3986a2e0c79ba5.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b3396b5170c82b408d10ff7a2855a6afcfb43b28f9bb2ba36d3986a2e0c79ba5.dll
Resource
win10v2004-20220901-en
Target
b3396b5170c82b408d10ff7a2855a6afcfb43b28f9bb2ba36d3986a2e0c79ba5
Size
102KB
MD5
1fe779a33d1814ba237f0a581a2049fd
SHA1
13b5421ca2b486b58d3feae68576d8b4565b4f03
SHA256
b3396b5170c82b408d10ff7a2855a6afcfb43b28f9bb2ba36d3986a2e0c79ba5
SHA512
4c7e266a08a0a4ebbe78a8081b951c5439fa41ce24853e195664a9478b40937336b1f883fcb4508a13fbf9cd657153bfaab5cc6c80f8e80ba80c32e95b0a2ae6
SSDEEP
1536:INWujxA5EY8fwKVPBm89qUeKUKiQzUGpC4msEqQ+df:x/2Y84Cph9tRU+UGCqQ+df
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE