_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
a40f3453681f6ad31c3dd03af4fc163f8a90b77569a6fa9ab96b38eeb06e09c8.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a40f3453681f6ad31c3dd03af4fc163f8a90b77569a6fa9ab96b38eeb06e09c8.dll
Resource
win10v2004-20220812-en
Target
a40f3453681f6ad31c3dd03af4fc163f8a90b77569a6fa9ab96b38eeb06e09c8
Size
118KB
MD5
38f0aa4dbc38760ec519665b7b1f6b68
SHA1
6e25ec63307a6092d4ff77562ca6ca92e3c89396
SHA256
a40f3453681f6ad31c3dd03af4fc163f8a90b77569a6fa9ab96b38eeb06e09c8
SHA512
653ba11a15fadc07a085b8e8a62bf9e90c6489e02891209e6b12c84ac6d2b338d570819852657caf1d3d2e85a5508e0d9e9f7ecab09c0233ab75aaa1661abc1b
SSDEEP
1536:i8DDS7LFiLjnavBSsOnOonMaPJtSNBeAt94nouy8Af206g:7IFYjnav4bnOAMaWeAt2outKG
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE