Behavioral task
behavioral1
Sample
ecdf75ca12d69f1e5bacca94d3ce520a94becd54e4ea477affc4f3a7e6275053.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ecdf75ca12d69f1e5bacca94d3ce520a94becd54e4ea477affc4f3a7e6275053.dll
Resource
win10v2004-20220812-en
General
-
Target
ecdf75ca12d69f1e5bacca94d3ce520a94becd54e4ea477affc4f3a7e6275053
-
Size
640KB
-
MD5
aa5fd3f9c07b1dd21e28af5fda6921c2
-
SHA1
0a3e178c56675e88a6ec0a5accdab7c6d586cc1f
-
SHA256
ecdf75ca12d69f1e5bacca94d3ce520a94becd54e4ea477affc4f3a7e6275053
-
SHA512
bc28c20410bc3c7e5cc7ceab569f04551fb81074c2c0427a9db957e2e9ad2437a057c070d9b644d3aed43c71ec33cbb9cff79c166d58c1f96f901089454e03fe
-
SSDEEP
6144:zC0RF3onmR32siFYfPj4CJ3WspuE+A478kHdyNb4TtoS:20H3alL2fPj4o3WAYkNMoS
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ecdf75ca12d69f1e5bacca94d3ce520a94becd54e4ea477affc4f3a7e6275053.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 364KB - Virtual size: 364KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 273KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE