Behavioral task
behavioral1
Sample
dllexp.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
dllexp.exe
Resource
win10v2004-20230220-en
General
-
Target
dllexp.exe
-
Size
18KB
-
MD5
21e7e994a7327a22ec1ad1f81f62993e
-
SHA1
7dff826fc5df3854d429950943c4e8f93d8fb74e
-
SHA256
f4c204505506bcdfa5bd66a40d32a3b213cfd3a3cb8501734ecebf1f6495a029
-
SHA512
b23cd6c3beecba96ef528697661acaeec28b99b13cafe89bf24ddf3b9b6c94972cf30f0877a116110bd2b22cbf656ded80db33a4709dca58d85aa0f81ebffeab
-
SSDEEP
384:s1KmDFSS8D89gVIaCbv4EunzVw7QCu8ssw8rbb3WQoKut9NcgkPY:s1KmDU5D89+Cb1u8ssw0XIKjC
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
dllexp.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE