GetModuleInstance
Behavioral task
behavioral1
Sample
5f97b387f19be8d3fba073a2cd355c369d5b8e232873e0cf894cda2633b9d8b8.dll
Resource
win7-20220812-en
General
-
Target
5f97b387f19be8d3fba073a2cd355c369d5b8e232873e0cf894cda2633b9d8b8
-
Size
130KB
-
MD5
43fd28c05f0239f657b59d78de785b70
-
SHA1
2732dc54e4db2a27ea0ce318773524971fb45750
-
SHA256
5f97b387f19be8d3fba073a2cd355c369d5b8e232873e0cf894cda2633b9d8b8
-
SHA512
aa7172f404ce2cd6e75412b53ffbf0c56f09e440b2b8f862185bd84118d9a67b03560eba4b2d12dbbcb88efec892d837b494d15daa49c339a84893d0fa5af8d5
-
SSDEEP
3072:/4GJaB1W8c4BreQjxMY0tycVS3kX+3I8KC:QGi2SrRjxMYsVS3kXKKC
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
5f97b387f19be8d3fba073a2cd355c369d5b8e232873e0cf894cda2633b9d8b8.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE