obbxemsqlojth
Behavioral task
behavioral1
Sample
f60809dcd679c6add7203647a82305bbcc8a1d5dd38fdff880b46e994378e8f0.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f60809dcd679c6add7203647a82305bbcc8a1d5dd38fdff880b46e994378e8f0.dll
Resource
win10v2004-20220812-en
General
-
Target
f60809dcd679c6add7203647a82305bbcc8a1d5dd38fdff880b46e994378e8f0
-
Size
218KB
-
MD5
0c43ab5685c767348c6f014b6be97288
-
SHA1
9d296b1cf8e0cbaa1fd7564559d750d87738cb75
-
SHA256
f60809dcd679c6add7203647a82305bbcc8a1d5dd38fdff880b46e994378e8f0
-
SHA512
6841f5d15e8478e7bd94c0ede6867054a19707b32b153972df612c9cec736edf3f9f16cc30b066dee4e9a874a30b83d5bb23c2aac103ed9bee4f15980e21234a
-
SSDEEP
3072:mpxdtCiZtScx9+2Bu7aiDsLT4HZB9STG2FbfljbfiurTlRkd+Ss9NcIm4VnbqzE6:k1/x987XDsEQHFbdHfBdRzgI7bK2L2
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f60809dcd679c6add7203647a82305bbcc8a1d5dd38fdff880b46e994378e8f0.dll windows x86
2a15f6b7dd92d15e0da30f966695e2c9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
msvcrt
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
_except_handler3
_strlwr
isdigit
free
malloc
_setjmp3
realloc
longjmp
_pctype
_isctype
__mb_cur_max
__dllonexit
_onexit
_initterm
_adjust_fdiv
_stricmp
Exports
Exports
Sections
UPX0 Size: 216KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE