@__lockDebuggerData$qv
@__unlockDebuggerData$qv
__DebuggerHookData
__GetExceptDLLinfo
___CPPdebugHook
Behavioral task
behavioral1
Sample
c56f6352e68e30bc2b8671b643e1e33b7de8b9dfbf8e0e7e4514939a8c85c1a1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c56f6352e68e30bc2b8671b643e1e33b7de8b9dfbf8e0e7e4514939a8c85c1a1.exe
Resource
win10v2004-20220901-en
Target
c56f6352e68e30bc2b8671b643e1e33b7de8b9dfbf8e0e7e4514939a8c85c1a1
Size
25KB
MD5
2f84d67a4184364732f572ae3e7ab6f3
SHA1
95cfaa59be4e5a078d1df68142e1b0eba53da385
SHA256
c56f6352e68e30bc2b8671b643e1e33b7de8b9dfbf8e0e7e4514939a8c85c1a1
SHA512
93ad1535d0b1584296aff44c285c71914f0fc2e49d5a16c73a80c35f444038ba178d3830ce6c36104619decacf2a34ea13fb5cd4c0b14c3ba4dac97f2899ba19
SSDEEP
384:r82BJUMcg2oDms+6wQHjT68LswBkZ8U4rmSE44Oq2zaP2DW5zbAvwv5K/gCKf2Gy:gWJUMcWA6HHjVO12XS5HAvwv5/29DHx
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
@__lockDebuggerData$qv
@__unlockDebuggerData$qv
__DebuggerHookData
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ