CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
SetVM
SysLogoff
SysLogon
Behavioral task
behavioral1
Sample
d920d3951a19ef3b490732e46326327b46cbfdcbbbad1c94b3dda22648d9cfe5.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d920d3951a19ef3b490732e46326327b46cbfdcbbbad1c94b3dda22648d9cfe5.dll
Resource
win10v2004-20220812-en
Target
d920d3951a19ef3b490732e46326327b46cbfdcbbbad1c94b3dda22648d9cfe5
Size
270KB
MD5
408ef34a3e12e22150bdba28743d75e0
SHA1
776e73bebcf4adcb4619604e1e1e89ec8ab458f1
SHA256
d920d3951a19ef3b490732e46326327b46cbfdcbbbad1c94b3dda22648d9cfe5
SHA512
deb973b66914755738f6a9cf8b3ec95b3b4ac2360dfea870c6d2917f69ac7ab5a58cf00da81b923ba9db2766f0ab799c934e0065f7d08da3df23f582a4f377eb
SSDEEP
6144:T/upH4HebLVGAN9XxhzQgwZuPLHu2dUcPIV+TMX7Ebs6Org:TWmeBLXxhzQ0P7u2dUEIGMX7E464g
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
SetVM
SysLogoff
SysLogon
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE