VDMEnumTaskWOWEx
VDMTerminateTaskWOW
WSPStartup
Behavioral task
behavioral1
Sample
6a21391c7e3ab5e578a9e7771138cbf61259cc8396dab9b8771706e20da6bc7e.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6a21391c7e3ab5e578a9e7771138cbf61259cc8396dab9b8771706e20da6bc7e.dll
Resource
win10v2004-20220901-en
Target
6a21391c7e3ab5e578a9e7771138cbf61259cc8396dab9b8771706e20da6bc7e
Size
24KB
MD5
858bbe5bcdef1f2956b3083bc7a73740
SHA1
dc5dd451c891eadf82bb927169a81d3dc01795e7
SHA256
6a21391c7e3ab5e578a9e7771138cbf61259cc8396dab9b8771706e20da6bc7e
SHA512
47b0a4cc30f61d5462e467ee44fc71620d2db92d0dff30d2e56756c4676b591b32246cb88320aef86433b810c8ad6f9ea9218270c0de310e234a816bba8c7832
SSDEEP
192:jO35YZJBjYnnIXvK3DVbJmusR0OJ5NOhEDLsWavkVkOOgy56lHn9HHEoYejarZmh:joMJgWKms25+OOT56l2oYejd4R
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
VDMEnumTaskWOWEx
VDMTerminateTaskWOW
WSPStartup
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE