_DllMain@12
do_work
do_work_ap
do_work_bk
do_work_dw
do_work_ec
do_work_fm
do_work_go
do_work_ls
do_work_mg
do_work_pk
do_work_sh
do_work_sv
do_work_tz
Behavioral task
behavioral1
Sample
ab6e01ab0e61f041aa65f08e75eced7d8b8a08837a37d7aa65f8cb91ef148c82.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ab6e01ab0e61f041aa65f08e75eced7d8b8a08837a37d7aa65f8cb91ef148c82.dll
Resource
win10v2004-20220901-en
Target
ab6e01ab0e61f041aa65f08e75eced7d8b8a08837a37d7aa65f8cb91ef148c82
Size
74KB
MD5
1d556e10f25bf301a80069549cc397bc
SHA1
1a978a2736a82ed940b7f50e9674813ea1a1bf44
SHA256
ab6e01ab0e61f041aa65f08e75eced7d8b8a08837a37d7aa65f8cb91ef148c82
SHA512
aac44eaf4b88af5e7ebb42c0d90d9862ea094002f543ca46cd24f61666b7b0ffc7c9d73e417d58d6a11680c1efd82a1f3c4d9edf1edafbc39a02a21c633a1778
SSDEEP
1536:XftUxSZBAw12gWB4ESxiDx6HBdOLYJOi16NBKzLw3BdheaA9EVZ:CxS01gE4txSyJOia39eaua
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
_DllMain@12
do_work
do_work_ap
do_work_bk
do_work_dw
do_work_ec
do_work_fm
do_work_go
do_work_ls
do_work_mg
do_work_pk
do_work_sh
do_work_sv
do_work_tz
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE