VDMEnumTaskWOWEx
VDMTerminateTaskWOW
WSPStartup
Behavioral task
behavioral1
Sample
b5449f3da83556816ee046ead39ec885c56882ac67314e1775dabe449f03cac3.dll
Resource
win7-20220901-en
Target
b5449f3da83556816ee046ead39ec885c56882ac67314e1775dabe449f03cac3
Size
24KB
MD5
45d4c10b0f7440dec505f011001839b0
SHA1
cc791aba36a75497f1fdf9d3d0d8ccbc16e7da1e
SHA256
b5449f3da83556816ee046ead39ec885c56882ac67314e1775dabe449f03cac3
SHA512
aa78b729720449a19b3e2822d28efc57bbecdfb827157e27a1395b2afda36d1cbab4d0f5f4ea83ae9ff3d2172023cf87d847fbb6ff54698c73771a077448384e
SSDEEP
192:XO35YZJBjYnnIXvK3DVbJmusR0OJ5NOhEDLsWavkVkOOgy56lHn9HHEoYejarZmh:XoMJgWKms25+OOT56l2oYejd4R
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
VDMEnumTaskWOWEx
VDMTerminateTaskWOW
WSPStartup
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE