CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
Setup
SysLogoff
SysLogon
Behavioral task
behavioral1
Sample
d846e26de95f20552fb19036a5d76296ffcbfbac53075673114a5abfe6117745.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d846e26de95f20552fb19036a5d76296ffcbfbac53075673114a5abfe6117745.dll
Resource
win10v2004-20221111-en
Target
d846e26de95f20552fb19036a5d76296ffcbfbac53075673114a5abfe6117745
Size
274KB
MD5
05ab86889a8429f8f6019ade69ce7d2d
SHA1
cf89435c19fe73611a8fabdf1932fdab22f3f65f
SHA256
d846e26de95f20552fb19036a5d76296ffcbfbac53075673114a5abfe6117745
SHA512
d0a3582dc688b75332a5f2a92748091fa41bf2fb4e75f42b4366d732352f22944bcc8025e90127f412cfcd7495e5165424dd4d56229d914b33776e484ed755df
SSDEEP
6144:LfmExs8N1I9JZJ2RofHL3OaB8th0oVwjtkFrQqi4ICL2yhz:rjxFI9Ja2T+akh0oV9hiHg2yhz
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
Setup
SysLogoff
SysLogon
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ