Behavioral task
behavioral1
Sample
65105b1e475630fb309a5327a1a2d4ac2fbc2ecead0394f3d2b2fa91d7468768.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
65105b1e475630fb309a5327a1a2d4ac2fbc2ecead0394f3d2b2fa91d7468768.dll
Resource
win10v2004-20220901-en
General
-
Target
65105b1e475630fb309a5327a1a2d4ac2fbc2ecead0394f3d2b2fa91d7468768
-
Size
247KB
-
MD5
ff7362d20e19cf50c994a1268de3780f
-
SHA1
b908457f03b14b8035b34af84675ffe6cf6d187b
-
SHA256
65105b1e475630fb309a5327a1a2d4ac2fbc2ecead0394f3d2b2fa91d7468768
-
SHA512
ad9c62fddbd896bc7521858100b6c7a31c2ae24116898cd0826704f5ed42667f58ff271db986413e0462462cc386931b12c1f5bc6328604024f7b8a5a8572d97
-
SSDEEP
6144:KhrmEh75LdThI48cHt0IIifY9nwj7Mr+ZiZLT0:Kht15ZXv0II2CnSC+h
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
65105b1e475630fb309a5327a1a2d4ac2fbc2ecead0394f3d2b2fa91d7468768.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 79KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE