Behavioral task
behavioral1
Sample
0ab844d35cf67a634a481b93d4299a63322b351eeb12ae5059e7d401732729ac.dll
Resource
win7-20220812-en
General
-
Target
0ab844d35cf67a634a481b93d4299a63322b351eeb12ae5059e7d401732729ac
-
Size
181KB
-
MD5
2989de3241ce8b43c16be5407b48f793
-
SHA1
c99b00c067e3dd4af8cd3d2e923f33e6cecb592d
-
SHA256
0ab844d35cf67a634a481b93d4299a63322b351eeb12ae5059e7d401732729ac
-
SHA512
dc73a60b813c4a6b44ed84e39e8be10c9a656eba37c32ef3d50370cc0ae5d1df3c46218b617af9d17731e755c5b5fda8c1098ce0caab0b1d618d69834810eb4b
-
SSDEEP
3072:bSLe2ibPKUfuf67wNliEGyUoocEo3SW5uFbwE6ac9YDzJx6BZntq2t6IBL:b2ZDfLdRZ7OFFcgJx8ZnP1
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
0ab844d35cf67a634a481b93d4299a63322b351eeb12ae5059e7d401732729ac.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 79KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE