DllCanUnloadNow
DllGetClassObject
Cgmnama
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Behavioral task
behavioral1
Sample
e0db13aea893d5c6a90760df11e5464c26690380f153935505ec1a3d55935605.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e0db13aea893d5c6a90760df11e5464c26690380f153935505ec1a3d55935605.dll
Resource
win10v2004-20221111-en
Target
e0db13aea893d5c6a90760df11e5464c26690380f153935505ec1a3d55935605
Size
216KB
MD5
947ddb30626b34d1a7daa56362844cfa
SHA1
4075144d376adea66a8f75241e098c19a090db8e
SHA256
e0db13aea893d5c6a90760df11e5464c26690380f153935505ec1a3d55935605
SHA512
eb642c60dda1208857424285bb38616558f0a0c8557abf639f5021093af4ccccc6e8e2defda8d869ae72b11c080126a01eed86c0cb88fd49b9ff461224453d7d
SSDEEP
6144:9hrl1NWPLfVYF3xqEhNR7mYd+Y2oSWOg:pjWjVymYotoSW
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
Cgmnama
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE