CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
Setup
SysLogoff
SysLogon
Behavioral task
behavioral1
Sample
caac32440a3fa8608b1bf6f4e1062ff21a2951f739e813ed693148d58c078ecf.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
caac32440a3fa8608b1bf6f4e1062ff21a2951f739e813ed693148d58c078ecf.dll
Resource
win10v2004-20220901-en
Target
caac32440a3fa8608b1bf6f4e1062ff21a2951f739e813ed693148d58c078ecf
Size
275KB
MD5
479fc94ffb25c4e83d3d87be2a7b46eb
SHA1
551bc5c29b69ee37753b4e5fcd6c48a866044158
SHA256
caac32440a3fa8608b1bf6f4e1062ff21a2951f739e813ed693148d58c078ecf
SHA512
adbfcb2db303c5ca37490ead1f2140d76a9fcaff322aaa478fac4ead572649a5e4ea97a626cb4e33e59557ba9b202e0d5b149a778282458f1d02f130e36e5867
SSDEEP
3072:Wt8rsF+k1djAei165y8ohhzMLGTwcTVCepTLIZXaF75ZQwydSjaL8tQDg3U2i1Z2:URdi16C7x+kF75SwQpgVPoHukfW8e1l
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
Setup
SysLogoff
SysLogon
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ