CancelDll
LoadDll
Behavioral task
behavioral1
Sample
bfceafe4f55c2a7758a8029772a8bc42da25a979e3882d7e5b3368724d2937cc.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bfceafe4f55c2a7758a8029772a8bc42da25a979e3882d7e5b3368724d2937cc.dll
Resource
win10v2004-20221111-en
Target
bfceafe4f55c2a7758a8029772a8bc42da25a979e3882d7e5b3368724d2937cc
Size
112KB
MD5
f455f4892ff9baf2ea8a47b4414f8d55
SHA1
abeb7fdd402fc1d60055e7e4c92fcee2fb981826
SHA256
bfceafe4f55c2a7758a8029772a8bc42da25a979e3882d7e5b3368724d2937cc
SHA512
5e0cf892b45bf855b621d4c7f47cf6947b63d1e8a104f314950fcb7e0f2437212392b288a60cc5b6de506325fa94b8019ab247bf83d459a77891e900e61a63cb
SSDEEP
1536:TD6K271gp7DXHQ49A/GwdJaefspPd1K++AYo0bcRXOpB8r4Ht:TDGYLww7yaefsRKpAjy
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE