Behavioral task
behavioral1
Sample
db19a20f781eab6088eb5b9d8f130a1a3d7eb92e3d4a73d7a2dde97aa3bc400c.dll
Resource
win7-20221111-en
General
-
Target
db19a20f781eab6088eb5b9d8f130a1a3d7eb92e3d4a73d7a2dde97aa3bc400c
-
Size
177KB
-
MD5
5afba991de9934e53013e9eb4164391b
-
SHA1
561ce42b76b18e45e4e91b594946ef9fe95e84a8
-
SHA256
db19a20f781eab6088eb5b9d8f130a1a3d7eb92e3d4a73d7a2dde97aa3bc400c
-
SHA512
fae293fc4a5f88879e71991657de5add7237d41095798bb6a7d9e3da2a8c6892bfc6529d1fa3d15820e1ea154b08118a03abae6b6bd3da244b7443e6159dadcf
-
SSDEEP
3072:TVUF34Lp8d2aJgRaFK5gvAC3pK6YJrY1vA4KUg0AK1ZRuKRcLZhUzNXqBoqVOnil:Tq4+2qg4Fcgvbp0JY1vA1xGO1hUzBqBt
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
db19a20f781eab6088eb5b9d8f130a1a3d7eb92e3d4a73d7a2dde97aa3bc400c.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 76KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE