Behavioral task
behavioral1
Sample
f5e8ec6e6041b064c297940f66fc275635fa88246fc35fe55d6bbf0aec865d91.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f5e8ec6e6041b064c297940f66fc275635fa88246fc35fe55d6bbf0aec865d91.dll
Resource
win10v2004-20220901-en
General
-
Target
f5e8ec6e6041b064c297940f66fc275635fa88246fc35fe55d6bbf0aec865d91
-
Size
953KB
-
MD5
f8caea9f76eaba83daf2a987ea554110
-
SHA1
0df93195caa8376d95d4c01da906bbd0af36b3bd
-
SHA256
f5e8ec6e6041b064c297940f66fc275635fa88246fc35fe55d6bbf0aec865d91
-
SHA512
4dfc0fd3e5f92e9d8cfb0fe68642e58ea4e7ed20142dd68c74486740e4ae9259d7ab7eba019885989010aec171cedc1d6c6c26299cce5f0f59d8e6ef0393d1d3
-
SSDEEP
24576:+sQealPh55zEoEb6xKA6bfNIRqfAbRWe/G:+NzlPqoEmxKAMfNIUfAbRd/G
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f5e8ec6e6041b064c297940f66fc275635fa88246fc35fe55d6bbf0aec865d91.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 949KB - Virtual size: 952KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE