_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
cb71d61285a366f3c5ed5e674b0a95a77060c648ef3efad8e27bcfe547bf22e1.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cb71d61285a366f3c5ed5e674b0a95a77060c648ef3efad8e27bcfe547bf22e1.dll
Resource
win10v2004-20221111-en
Target
cb71d61285a366f3c5ed5e674b0a95a77060c648ef3efad8e27bcfe547bf22e1
Size
130KB
MD5
219344886a90c24c31e9d87c4875d040
SHA1
56ce361b84df723efbd1a1622fb5fab0aab6e56a
SHA256
cb71d61285a366f3c5ed5e674b0a95a77060c648ef3efad8e27bcfe547bf22e1
SHA512
bb0da1d9f97f472d5caf8fb6f175785c42f34071785ecaa7630e18e8732fd985fce2cd482b26cc01b120af803ab9aa0185733725f05d18aff670d02a74caf463
SSDEEP
1536:BQVvDb5MPLy/W8CsQ1hj+FqN1OCO2dOvEsvV0KFQKOkHXVHzpwPB+KuB8nyiHiri:uVrbU3U2UvEsv/FrpBiyiHtout42oDq
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE