Hr
Behavioral task
behavioral1
Sample
bfe069d51141fcea937809ccba19521c08b88faa57d70e35cae5ffd0fbd3a879.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bfe069d51141fcea937809ccba19521c08b88faa57d70e35cae5ffd0fbd3a879.dll
Resource
win10v2004-20221111-en
General
-
Target
bfe069d51141fcea937809ccba19521c08b88faa57d70e35cae5ffd0fbd3a879
-
Size
190KB
-
MD5
3d5944e7a6803f423484734487aff61d
-
SHA1
141c9d9e63ef5a64ad4819a18eecbe4241cd6ce6
-
SHA256
bfe069d51141fcea937809ccba19521c08b88faa57d70e35cae5ffd0fbd3a879
-
SHA512
6c28938fc3e8a13bac6278e0f024820eb2f6f570270856a68db1c24be52089189cec3999172a1105d2d4b7798610278cb597f18d5703e734c6e6523fad9e8024
-
SSDEEP
1536:TQkNs+KWlenJQP2ETD4bjK6v3KbYnBIpKXJe1/Ip0x/3LBwVw1lxE:EkAW4nJQP2EX44bBwXJmBkw1L
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
bfe069d51141fcea937809ccba19521c08b88faa57d70e35cae5ffd0fbd3a879.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Exports
Exports
Sections
UPX0 Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE