_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
aa42e2cd2c8e3dad8133f0f91b4d7134bd3dc13a0d071a56021f556ca50524da.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
aa42e2cd2c8e3dad8133f0f91b4d7134bd3dc13a0d071a56021f556ca50524da.dll
Resource
win10v2004-20221111-en
Target
aa42e2cd2c8e3dad8133f0f91b4d7134bd3dc13a0d071a56021f556ca50524da
Size
118KB
MD5
f9df71f6ca3155c2fcf0f9e9d56b6085
SHA1
13995ec63587ff9b39460cbd246eff120485a890
SHA256
aa42e2cd2c8e3dad8133f0f91b4d7134bd3dc13a0d071a56021f556ca50524da
SHA512
715dc31942a3a25750289dd8c9c6f72dd91ae518788bbd7960dd7cfb1aeda536ac6a51496c2a52dc129fc4ea97e9d6c8f3d92ee97b87d997dda5ac3e7e2bcefb
SSDEEP
1536:18DDS7LFiLjnavBSsOnOonMaPJtSNBeAt94nouy8Af206g:YIFYjnav4bnOAMaWeAt2outKG
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE