CreatePProc
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
SetVMToolTip
Uninstall
UserLogOff
UserLogOn
Behavioral task
behavioral1
Sample
e42dcece696605f94177a7d86164ca8dcefc8cb25d7ad4b7fc31c13286213e8d.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e42dcece696605f94177a7d86164ca8dcefc8cb25d7ad4b7fc31c13286213e8d.dll
Resource
win10v2004-20221111-en
Target
e42dcece696605f94177a7d86164ca8dcefc8cb25d7ad4b7fc31c13286213e8d
Size
171KB
MD5
04fda06cd7748abda4dd85e099c22b60
SHA1
c42364c84f49c73b834a0daa26d1bbfbf7efa9a9
SHA256
e42dcece696605f94177a7d86164ca8dcefc8cb25d7ad4b7fc31c13286213e8d
SHA512
e78d0dbebb7ed64fb53e8149781805b13723c24070970b068af0cf9706986d703f9aee41d20e74be60fc0a0182ab069cd96715ee346fec74b9a3f365bfda333f
SSDEEP
3072:0F1BBba9uXCDZxGYckghFoo7b8OUmmRZZVFebnRZjYA4gglWBt:0FpbQrGIgJ7b0mmRrVFerR2/g7
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CreatePProc
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
SetVMToolTip
Uninstall
UserLogOff
UserLogOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ