Behavioral task
behavioral1
Sample
95d4d79fff4c26ce1b84508def40212762e1b276c8c8e88a18857ee1b76aa7d9.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
95d4d79fff4c26ce1b84508def40212762e1b276c8c8e88a18857ee1b76aa7d9.dll
Resource
win10v2004-20220812-en
General
-
Target
95d4d79fff4c26ce1b84508def40212762e1b276c8c8e88a18857ee1b76aa7d9
-
Size
53KB
-
MD5
95d96de13be0355f793825dfa61c8616
-
SHA1
ed3ba44c2325b27381da0a489a20e6de96d853e5
-
SHA256
95d4d79fff4c26ce1b84508def40212762e1b276c8c8e88a18857ee1b76aa7d9
-
SHA512
f841056b473185b0fcd6e8f5287b7b29d4d5d84af74bec09eb0396b06ebeb095f748ac7aaf0ebe153b7450db691cc3fc7ab339b804fd537684c6661ede1c6abd
-
SSDEEP
1536:QSuw/2DsD76j96o9GGs8L4yKjwv7mNodr6yeppskj:huw+B9b4kLz7mNo4yspsk
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
95d4d79fff4c26ce1b84508def40212762e1b276c8c8e88a18857ee1b76aa7d9.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.idata Size: 35KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 240B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ