Behavioral task
behavioral1
Sample
81da89a8199c5a3da59ad353fbda1c8b7eea7a456d36cb8407aea787a6953d03.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
81da89a8199c5a3da59ad353fbda1c8b7eea7a456d36cb8407aea787a6953d03.dll
Resource
win10v2004-20221111-en
General
-
Target
81da89a8199c5a3da59ad353fbda1c8b7eea7a456d36cb8407aea787a6953d03
-
Size
388KB
-
MD5
5682b25a5c384c97f77c687f0b1d75db
-
SHA1
a271385e4621527933df0a2713fa30e38aff56ca
-
SHA256
81da89a8199c5a3da59ad353fbda1c8b7eea7a456d36cb8407aea787a6953d03
-
SHA512
d5044285687c1cf27ca630a9ee8e1177d731ac0b50fc48cc2ad0f2422948a987f5d0b377ffe42a61a257d9543b2bfce4b4858372695982a63e9eb06cfa35791f
-
SSDEEP
6144:kVNGAVtEVY2ICdZ7WmQ3z2FbyFqMs63OU:kPVtv2ICd1WmQEyFFf3
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
81da89a8199c5a3da59ad353fbda1c8b7eea7a456d36cb8407aea787a6953d03.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 248KB - Virtual size: 248KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 115KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE