Behavioral task
behavioral1
Sample
a856d01bddba128fc4b5aa84a034e60b9e2afe3529dc32396e6f0a626e8403e1.dll
Resource
win7-20220812-en
General
-
Target
a856d01bddba128fc4b5aa84a034e60b9e2afe3529dc32396e6f0a626e8403e1
-
Size
64KB
-
MD5
0e55626511a2349110ab72e438fe40a0
-
SHA1
8c20cb1973a48fa77a2a5cd02a2ef51a13f12fb5
-
SHA256
a856d01bddba128fc4b5aa84a034e60b9e2afe3529dc32396e6f0a626e8403e1
-
SHA512
6cbbbf80f585504704ab82988a67fec27ed33bc6424ffbe47ccaff75799b069b16f605bddb7ecfeb52bf387e6615412207b584457fe2dd069302d7bfe4bbb380
-
SSDEEP
1536:i8dGUuZLVz55EGbW+pYm1OJz4KEWp9ItOCd+0WDOYjiNOqY:iAASsW+RQ4VWp9ItOM
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
a856d01bddba128fc4b5aa84a034e60b9e2afe3529dc32396e6f0a626e8403e1.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE