ybob
Behavioral task
behavioral1
Sample
20e3b44c0498d3ce906ae17dc5d832f247488bd6f8b230993930df7047cb09e5.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
20e3b44c0498d3ce906ae17dc5d832f247488bd6f8b230993930df7047cb09e5.dll
Resource
win10v2004-20220812-en
General
-
Target
20e3b44c0498d3ce906ae17dc5d832f247488bd6f8b230993930df7047cb09e5
-
Size
37KB
-
MD5
074661e5052355329ddf07fe2c18f5f0
-
SHA1
1cba8d3768eb4bbd227ad1dd0d8201c8c10b6512
-
SHA256
20e3b44c0498d3ce906ae17dc5d832f247488bd6f8b230993930df7047cb09e5
-
SHA512
f72d2dc59f03d26407a75d98dbda26d82293fa6ac3970c6f5b42e5cd2fec38bab41fa69084e1bea2c7ff8e5b9457ca1849c576dc1565685bda5d7472f8ac1718
-
SSDEEP
384:f7+7mWzwdxtZc83BnB/udKtnxcuq6wqk1txlKBCHVPnpPgg5+ZJWNWFHS:D1xd3ZF7CKtnmuq67Q7KBC1fpYg52HS
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
20e3b44c0498d3ce906ae17dc5d832f247488bd6f8b230993930df7047cb09e5.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE