a
b
Behavioral task
behavioral1
Sample
eab49b902fdf30708f464fec53dcf7e479db91f1be59aae482db2fe9729ab08a.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
eab49b902fdf30708f464fec53dcf7e479db91f1be59aae482db2fe9729ab08a.dll
Resource
win10v2004-20220812-en
Target
eab49b902fdf30708f464fec53dcf7e479db91f1be59aae482db2fe9729ab08a
Size
71KB
MD5
12b97fd15928c7e709bab09ac7d8d00c
SHA1
f74acc77c1fb1348bfff1b1fe05699d688af1d98
SHA256
eab49b902fdf30708f464fec53dcf7e479db91f1be59aae482db2fe9729ab08a
SHA512
cf369fc42cf29073f69f8041d145d87980cc1b3a9dcfd741ccdc0c6a6c90647d121e6053affac11d5c47756e4e03fd8e45d5997e8ddb97f0de5b2dfbf08e2d40
SSDEEP
1536:+JZ0x/MXIb+sflXq2B2X/s1rXRdNNJgxoIWrhRDtZvFBtq:2Ejb+s32Evdfzf51FS
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
a
b
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ