InetPass
TestDLL
UsrLst
Behavioral task
behavioral1
Sample
e9fb674e2acb03788048cf088a94dc2d6dc3112ee70e0ce8888ec74158fb94c0.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e9fb674e2acb03788048cf088a94dc2d6dc3112ee70e0ce8888ec74158fb94c0.dll
Resource
win10v2004-20221111-en
Target
e9fb674e2acb03788048cf088a94dc2d6dc3112ee70e0ce8888ec74158fb94c0
Size
76KB
MD5
723d5dd05372713185c0ca3d2cdbede0
SHA1
103c913b12b99efc5db2ccfa890291421c321bf3
SHA256
e9fb674e2acb03788048cf088a94dc2d6dc3112ee70e0ce8888ec74158fb94c0
SHA512
a18f95c92303dfdb272896de73fe7d6f4e36fd0de14e5ececb5fb2f97ab9524cb56715c32d5e9abf3ddd15f8af58aad2ce889d32253080580d105ba810a2456c
SSDEEP
768:klbYUq8Ked+/dje46Jwy9MqsGgVZUKZda4nWHa7rGgy+O8DV2om1zWq048FwSuBj:oXq8Kjdjelszi4W67CB+wX1zWFTwS
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
GetModuleFileNameA
WriteFile
VirtualQuery
SetFilePointer
SetEndOfFile
ReadFile
LoadLibraryA
GetWindowsDirectoryA
GetVersionExA
GetThreadLocale
GetProcAddress
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetCurrentThreadId
GetCPInfo
FreeLibrary
FormatMessageA
CreateFileA
CompareStringA
CloseHandle
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
lstrcpyA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetCommandLineA
FreeLibrary
ExitProcess
WriteFile
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetFileType
CreateFileA
CloseHandle
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
WNetOpenEnumA
WNetEnumResourceA
WNetCloseEnum
VariantChangeTypeEx
VariantCopyInd
VariantClear
SysStringLen
SysFreeString
SysAllocStringLen
MessageBoxA
LoadStringA
GetSystemMetrics
GetKeyboardType
LoadStringA
MessageBoxA
InetPass
TestDLL
UsrLst
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE