CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ddafbb7e4af3b06814d3282f82c6b07cf8c3545e6eb416d1a1c51e4481ccb355.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ddafbb7e4af3b06814d3282f82c6b07cf8c3545e6eb416d1a1c51e4481ccb355.dll
Resource
win10v2004-20220812-en
Target
ddafbb7e4af3b06814d3282f82c6b07cf8c3545e6eb416d1a1c51e4481ccb355
Size
90KB
MD5
c4d5e9399d935668bd7029619c1f3d7f
SHA1
b6d33a0a6346abe75caaf9c6b02ec6b467dc6e25
SHA256
ddafbb7e4af3b06814d3282f82c6b07cf8c3545e6eb416d1a1c51e4481ccb355
SHA512
84c9816e09035c720f6f86c9791c8f984b43afe6a9cd7a2111033c87b1f70537202aa2e8da44fc3ad2111ec9b5a78839a6f82aed4f34bc3478ba536bdf25157d
SSDEEP
1536:fiJJJXbJlTYTnkddCrQAaPa67vY9QE3kFsMpz5+K0t:GJvpYTnkddQQXPa67vYn3kFsSz5+N
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE