Behavioral task
behavioral1
Sample
087499978efaf1ee9626f2b350a3a4d8d8052f7fd53c3427f70839780e21e6ac.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
087499978efaf1ee9626f2b350a3a4d8d8052f7fd53c3427f70839780e21e6ac.dll
Resource
win10v2004-20221111-en
General
-
Target
087499978efaf1ee9626f2b350a3a4d8d8052f7fd53c3427f70839780e21e6ac
-
Size
879KB
-
MD5
afb01495dc10427f05ad1468c1975180
-
SHA1
474d69e35ad4dd752b74237076d63033c9149536
-
SHA256
087499978efaf1ee9626f2b350a3a4d8d8052f7fd53c3427f70839780e21e6ac
-
SHA512
b66cfa864eb784f8bd899082e5c06be79f06ad0d1b88014f5d831ce1145d649bd8e38cc65ac92d024b78241de7972b8f86423b5abc474cd8ff4cad62eb35b4ba
-
SSDEEP
24576:lY1fAbWYpfVz0AYQN6ZmOHbvPHAyfvMgo:61f2WYphrYQNA37vPHAyfvMgo
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
087499978efaf1ee9626f2b350a3a4d8d8052f7fd53c3427f70839780e21e6ac.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 875KB - Virtual size: 876KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE