start
youAlive
Behavioral task
behavioral1
Sample
b89a252910eca3a2d59af852af4f829252b96ba516358e86d128b22c97715ea9.dll
Resource
win7-20220812-en
Target
b89a252910eca3a2d59af852af4f829252b96ba516358e86d128b22c97715ea9
Size
61KB
MD5
b8da721b22d43c1ba29eeeaca3a5e844
SHA1
8608ddbeb9a51907ff3660335917439969af6a01
SHA256
b89a252910eca3a2d59af852af4f829252b96ba516358e86d128b22c97715ea9
SHA512
e67f3825372bdc939ebe998422caff99bccb8a49053b1618d249884a3e626c657859bbe09ed0d91abbdef917632ad4ba396b9de08688a95bc75514cbdf9175e4
SSDEEP
1536:eXDr9NNfN0a5O3k7UZafsUs3VEKrOCSDDq/X:eXDDNl0KO0wQsHO93q
resource | yara_rule |
---|---|
sample | upx |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
start
youAlive
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE