Behavioral task
behavioral1
Sample
b6a883d7238ccb6332b4ad52389195eb61f32257a75e97a91f8166cea0dd392b.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b6a883d7238ccb6332b4ad52389195eb61f32257a75e97a91f8166cea0dd392b.dll
Resource
win10v2004-20221111-en
General
-
Target
b6a883d7238ccb6332b4ad52389195eb61f32257a75e97a91f8166cea0dd392b
-
Size
15KB
-
MD5
c521b83e05f0f8bf5d87357617926faf
-
SHA1
2a04a6d5e6b17333d5ef1f6cb49f39c643979ad7
-
SHA256
b6a883d7238ccb6332b4ad52389195eb61f32257a75e97a91f8166cea0dd392b
-
SHA512
885d0c9c8f6de7a3551c2287f7792e458c307a51d35085cf82b191f84cf495cff1fefeac4853f67e90ce5d04ee517b84085064cd749242b07446ea8b9303853a
-
SSDEEP
192:oRAdDMPSMek3a6fQiO0tAXgxTEoA6OiA62w7wtL1PkQ69Rh3hnecolABa:vdDESMeMa6fnOWTEoA6Xp72ktzh3hT8
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b6a883d7238ccb6332b4ad52389195eb61f32257a75e97a91f8166cea0dd392b.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ