_ldr@16
Behavioral task
behavioral1
Sample
f57efafaa1a130fc35608e85f488a05d797a98668d7f4b5c5b4c018b39e94cf1.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f57efafaa1a130fc35608e85f488a05d797a98668d7f4b5c5b4c018b39e94cf1.dll
Resource
win10v2004-20220812-en
General
-
Target
f57efafaa1a130fc35608e85f488a05d797a98668d7f4b5c5b4c018b39e94cf1
-
Size
76KB
-
MD5
550ea5ebadd006e2dde098a38019d6d0
-
SHA1
60d4bbc22e1c5e7e9591d512c4f69f880457d80b
-
SHA256
f57efafaa1a130fc35608e85f488a05d797a98668d7f4b5c5b4c018b39e94cf1
-
SHA512
8413eb586c1d20140fb5aae70f077c6652ee7bb1c3143b4fc9e16bcdc912900e964acd3b6d91818be9dca0f712221da77c7097f9d014b7e345370f9d30263892
-
SSDEEP
768:twwSSEyJ8TxqriMgpMXr7MMiz57KHKgqaA3hgAAh3LYP0qiqunTEDeBuYopjE7Ce:twwUa8criF6r7MM0O738PHyJAjjOkb
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f57efafaa1a130fc35608e85f488a05d797a98668d7f4b5c5b4c018b39e94cf1.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE