Behavioral task
behavioral1
Sample
7b0202e59e7a69167c4eedfa565e13cf559f39c134e69658804d8bca192b0894.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
7b0202e59e7a69167c4eedfa565e13cf559f39c134e69658804d8bca192b0894.dll
Resource
win10v2004-20220812-en
General
-
Target
7b0202e59e7a69167c4eedfa565e13cf559f39c134e69658804d8bca192b0894
-
Size
920KB
-
MD5
687452354212423aef2b9e7f5f23126f
-
SHA1
7841df2c315228154f3061b2d6797035258b62ae
-
SHA256
7b0202e59e7a69167c4eedfa565e13cf559f39c134e69658804d8bca192b0894
-
SHA512
709f54d02766acff89139ef4606fcb5914909d03f84011138c83bd74fac9edbb7e941145636bd60d974c3218a59e71d6ffa2f75461ed1c7714be42c1b13ab6ae
-
SSDEEP
24576:6awp/RoZhkF6Rv7/l3LQ+3890XSZr+KqXs:6adZGF6Rvh3s+38OXs+KqX
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
7b0202e59e7a69167c4eedfa565e13cf559f39c134e69658804d8bca192b0894.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 916KB - Virtual size: 916KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE