init
Behavioral task
behavioral1
Sample
b01f7d2e9f53c32a2b99db4116f195f17a132545c03591f661a2a07496f19d57.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b01f7d2e9f53c32a2b99db4116f195f17a132545c03591f661a2a07496f19d57.dll
Resource
win10v2004-20221111-en
General
-
Target
b01f7d2e9f53c32a2b99db4116f195f17a132545c03591f661a2a07496f19d57
-
Size
59KB
-
MD5
d797a9a1e5a0b8f0f7d2700abe67e8d3
-
SHA1
f1bbb587215a70dc4c3e05607845d18ddb043663
-
SHA256
b01f7d2e9f53c32a2b99db4116f195f17a132545c03591f661a2a07496f19d57
-
SHA512
41765dab2a77c0c22c1a12a423995267c895b5cb3cf6feab3e3b22071955adfcdbd08d53f1d625f2dca5479e8c718a773ac7d50a435012e0f37ba21d9009cc5f
-
SSDEEP
768:tYvpT+kiXUSc0qKZBmpd0Cb6C7XqrJp7kJHAo2uPXmPM:WvpPzpKLC76rJaJHAotmPM
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b01f7d2e9f53c32a2b99db4116f195f17a132545c03591f661a2a07496f19d57.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE