Static task
static1
Behavioral task
behavioral1
Sample
1a179d89f2b2e0c0b9070171a3754169da8ab85bf58cd9b22e3e75a6e451892b.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
1a179d89f2b2e0c0b9070171a3754169da8ab85bf58cd9b22e3e75a6e451892b.dll
Resource
win10v2004-20221111-en
General
-
Target
1a179d89f2b2e0c0b9070171a3754169da8ab85bf58cd9b22e3e75a6e451892b
-
Size
667KB
-
MD5
79a61fa9a56ebe33672aec7deb3d1145
-
SHA1
1451050c7e711fb995dab85a89eb37b6bbb7d1ba
-
SHA256
1a179d89f2b2e0c0b9070171a3754169da8ab85bf58cd9b22e3e75a6e451892b
-
SHA512
cef8f17cffa5bc27b6d571ca193b9b000dcf5d8cbdfca2a050fc45b9e6b02970fd061578108c96a5b208c85958b306405d3a7bf395f692ca9cb6bc9ca934e591
-
SSDEEP
6144:d/Bt80VmNTBoTFZZjAetGDN3VFNq7pC+9OqFoK30b3ni5rdQY/CdUls:d/X4NTSTFDNG+w+9OqFoK323qdQYKUK
Malware Config
Signatures
-
Patched UPX-packed file 1 IoCs
Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.
resource yara_rule sample patched_upx
Files
-
1a179d89f2b2e0c0b9070171a3754169da8ab85bf58cd9b22e3e75a6e451892b.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 242KB - Virtual size: 241KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ