CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
RealLogoff
RealLogon
Setup
Behavioral task
behavioral1
Sample
f9781e97b74c0475766ffb389c4ec9c9bc84885c541b4056057a8cf318368ab0.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f9781e97b74c0475766ffb389c4ec9c9bc84885c541b4056057a8cf318368ab0.dll
Resource
win10v2004-20220901-en
Target
f9781e97b74c0475766ffb389c4ec9c9bc84885c541b4056057a8cf318368ab0
Size
274KB
MD5
56f62549e1c5ac1c4374dfaa5e0f48eb
SHA1
ccc21e1de8aa14865a77d366fde6f501cfdce07f
SHA256
f9781e97b74c0475766ffb389c4ec9c9bc84885c541b4056057a8cf318368ab0
SHA512
8d11d207c16327eae6cfcdae8370d550e566f02d0643642a9858036848961a22d6bd7035a960aadf018c82718e8767f6adee3b9ac0ad22aef7cd2bb01f31c3ed
SSDEEP
6144:BdCxw+O1nZ5xWInmP1SnvvOP9ZPTgsAkwLwb0nnEN7U:O8nYI8SnvIPhVwL80nEN7U
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
RealLogoff
RealLogon
Setup
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ