DriverProc
init
modMessage
modmCallback
Behavioral task
behavioral1
Sample
67fef20373ec062208d0de078c03fd19666d5a239f9d059d2fca21cadabcb6a4.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
67fef20373ec062208d0de078c03fd19666d5a239f9d059d2fca21cadabcb6a4.dll
Resource
win10v2004-20220901-en
Target
67fef20373ec062208d0de078c03fd19666d5a239f9d059d2fca21cadabcb6a4
Size
64KB
MD5
b591479b8f2e0c27583c8f9242baed5e
SHA1
6b7aa5a9e95a5e61eba7f52931a79991cd205dc9
SHA256
67fef20373ec062208d0de078c03fd19666d5a239f9d059d2fca21cadabcb6a4
SHA512
8a73ae8b11c636a2f6f3db23a3180d6a8da05528b4fc4ec3c7c61f04211793798c31771a8a82dcf3c0bede2489ecbc8a69e240354b7963a12ac76161431e4880
SSDEEP
768:EswOMt9AkvZQf27GTeJAAE001hYXrrF5/4j3aPiMIyx/zH:8OCXBK27ueh0LYbrFGj39MIyxb
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DriverProc
init
modMessage
modmCallback
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE