Behavioral task
behavioral1
Sample
e838bb0eabfc207095a86d0c92f489151a793d70a8c6ca1fec75ae8ab1230117.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e838bb0eabfc207095a86d0c92f489151a793d70a8c6ca1fec75ae8ab1230117.dll
Resource
win10v2004-20220812-en
General
-
Target
e838bb0eabfc207095a86d0c92f489151a793d70a8c6ca1fec75ae8ab1230117
-
Size
914KB
-
MD5
12cedce833821702d5fd1f435470d060
-
SHA1
dd0740a521f86d46a29e3e325221e13e9073c3c4
-
SHA256
e838bb0eabfc207095a86d0c92f489151a793d70a8c6ca1fec75ae8ab1230117
-
SHA512
822a2dea6b60f6b0022c5dd50de78066e72392670853d21a2a3ac72887d2989ccfae119bcf3125fb128e41309eb0b85891f372a5d32e09dba7f10c3078e7fae0
-
SSDEEP
24576:BH13i7nlUbrKTiUF6SsvL+c8Czj14bJa:Bli7nXTqb5D1
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
e838bb0eabfc207095a86d0c92f489151a793d70a8c6ca1fec75ae8ab1230117.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 911KB - Virtual size: 912KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE