??0ScreenShot@@QAE@ABV0@@Z
??0ScreenShot@@QAE@XZ
??1ScreenShot@@UAE@XZ
??4ScreenShot@@QAEAAV0@ABV0@@Z
??_7ScreenShot@@6B@
?CreateScreenShot@@YAPAVScreenShot@@PAVDelegate@1@@Z
?DestroyScreenShot@@YAXPAVScreenShot@@@Z
Behavioral task
behavioral1
Sample
1ca52436a2e88c22db22494952d9099d930c8e0554d214925fcee8eb311e5861.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1ca52436a2e88c22db22494952d9099d930c8e0554d214925fcee8eb311e5861.exe
Resource
win10v2004-20230220-en
Target
1ca52436a2e88c22db22494952d9099d930c8e0554d214925fcee8eb311e5861
Size
377KB
MD5
c8a93aae473fce119b68868344e2f4e4
SHA1
df228ffba9cea2c75b717a1caf254410ecce802e
SHA256
1ca52436a2e88c22db22494952d9099d930c8e0554d214925fcee8eb311e5861
SHA512
bfaf3415ec0d7137c07e34238a03621dd8f2a05c4d3ef02b1f2cbe52f35c6acf085172b0f66a073374b9cba241b76d98f8c750666a2c1f3c142dfe682a42c04e
SSDEEP
6144:yBTxxkLwdra8MRdFuPGDvivCT9zffV9ofjRYZcqZZyDG+OrC38:yBcLwNaNN/jivwVGbRYZcSZyG+OrCs
resource | yara_rule |
---|---|
sample | upx |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
??0ScreenShot@@QAE@ABV0@@Z
??0ScreenShot@@QAE@XZ
??1ScreenShot@@UAE@XZ
??4ScreenShot@@QAEAAV0@ABV0@@Z
??_7ScreenShot@@6B@
?CreateScreenShot@@YAPAVScreenShot@@PAVDelegate@1@@Z
?DestroyScreenShot@@YAXPAVScreenShot@@@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ