Behavioral task
behavioral1
Sample
a9876bd35fd5e4924770d355514d1d2cee8fd9eff6b564fdb4f5bd34d765d735.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a9876bd35fd5e4924770d355514d1d2cee8fd9eff6b564fdb4f5bd34d765d735.dll
Resource
win10v2004-20220901-en
General
-
Target
a9876bd35fd5e4924770d355514d1d2cee8fd9eff6b564fdb4f5bd34d765d735
-
Size
994KB
-
MD5
bda275b7a7286213ae6b1e8a69d03d62
-
SHA1
9660b177e275aafe78c9bad4e609087cc32fdb8c
-
SHA256
a9876bd35fd5e4924770d355514d1d2cee8fd9eff6b564fdb4f5bd34d765d735
-
SHA512
c75cc05becdb68e36f90c75bf47557acf8dd3fa1cbba9cc82a420018f07f9753ca76d76de34fd18aba31c6b3545877bf2a9877baf0f78d508e6aa27b210c9cc2
-
SSDEEP
24576:UAQSIIx2Od9paKIuwyQoW86EemKPwEHdOaFwwLEtqVsGM:UAvhnae6rkE8aOwIm5
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
a9876bd35fd5e4924770d355514d1d2cee8fd9eff6b564fdb4f5bd34d765d735.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 990KB - Virtual size: 992KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE