CoGetComCatalog
GetRPCSSInfo
ServiceMain
Wh4tsTh3Fuck
i
Behavioral task
behavioral1
Sample
949f624cd6fea0f140536e118a011f87a49bded9ea206c447352b76199a76607.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
949f624cd6fea0f140536e118a011f87a49bded9ea206c447352b76199a76607.dll
Resource
win10v2004-20220812-en
Target
949f624cd6fea0f140536e118a011f87a49bded9ea206c447352b76199a76607
Size
18KB
MD5
c3aee4f643cf8546695677c273d959cd
SHA1
1589220c68b1f1b88ba34897e6df089363b541de
SHA256
949f624cd6fea0f140536e118a011f87a49bded9ea206c447352b76199a76607
SHA512
612eb65ed98db64dade5778f232d20cee23d5a72863296cdeec900dd3db0b385445440aadc91ae767934bc0f4974a0fc3bcf5673f2e21b8718e9c225277279bf
SSDEEP
384:kGhUaFWjt5dhy3DqbZl1emb9zswYU8VZV2LoTi+1bJ6oMi4:kG5y2Dq9l1ZzhgVuoTxAV
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CoGetComCatalog
GetRPCSSInfo
ServiceMain
Wh4tsTh3Fuck
i
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE