InetPass
TestDLL
UsrLst
Behavioral task
behavioral1
Sample
1e25acbbba5fa4e1d4d57d683d541f36b54fbb160a130767249dc10d70ce72ff.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1e25acbbba5fa4e1d4d57d683d541f36b54fbb160a130767249dc10d70ce72ff.dll
Resource
win10v2004-20221111-en
Target
1e25acbbba5fa4e1d4d57d683d541f36b54fbb160a130767249dc10d70ce72ff
Size
76KB
MD5
3ae66df78095361609ba73f030f16c90
SHA1
23031d4c082c7c293c520bb776fb7b7bde208f8d
SHA256
1e25acbbba5fa4e1d4d57d683d541f36b54fbb160a130767249dc10d70ce72ff
SHA512
1bdd9e8c2371ac72cff05bebe1e9f449e8c1c66155c19ac5bb92ebfe1c5529f1150ff6f4b8994c7e817980e29b574c5cebb29227276f3bd699254770c05acff5
SSDEEP
768:klbYUq8Ked+/dje46Jwy9MqsGgVZUKZda4nWHa7rGgy+O8DV2om1FnYFwjuBaa:oXq8Kjdjelszi4W67CB+wX12wj
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
GetModuleFileNameA
WriteFile
VirtualQuery
SetFilePointer
SetEndOfFile
ReadFile
LoadLibraryA
GetWindowsDirectoryA
GetVersionExA
GetThreadLocale
GetProcAddress
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetCurrentThreadId
GetCPInfo
FreeLibrary
FormatMessageA
CreateFileA
CompareStringA
CloseHandle
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
lstrcpyA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetCommandLineA
FreeLibrary
ExitProcess
WriteFile
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetFileType
CreateFileA
CloseHandle
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
WNetOpenEnumA
WNetEnumResourceA
WNetCloseEnum
VariantChangeTypeEx
VariantCopyInd
VariantClear
SysStringLen
SysFreeString
SysAllocStringLen
MessageBoxA
LoadStringA
GetSystemMetrics
GetKeyboardType
LoadStringA
MessageBoxA
InetPass
TestDLL
UsrLst
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE