Behavioral task
behavioral1
Sample
5ef33a392d2f23aeed11f885af94ff13.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
5ef33a392d2f23aeed11f885af94ff13.dll
Resource
win10v2004-20230703-en
General
-
Target
5ef33a392d2f23aeed11f885af94ff13
-
Size
612KB
-
MD5
5ef33a392d2f23aeed11f885af94ff13
-
SHA1
ab7df3d9a59fce32de6519926a3f86cac7a0c01a
-
SHA256
9442d8efa55252e6e432c548774c152a52789706e2c91fd0d3ce7fa98fce024e
-
SHA512
c74ab5a19449d36b3f21dbc3b4f5cfbe1d5bc3cb57fc9370311e55ad7644b34cecc1c131f5496efcd3b193a152f853f6d67786d99367b804870456feb001057f
-
SSDEEP
12288:7DggptMXA5A4DJbKSMPdNOBVroUVYLQhnRxvwQ3+GXNyJO:ttMXx4lluNwnYLEReQ3+EiO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ef33a392d2f23aeed11f885af94ff13
Files
-
5ef33a392d2f23aeed11f885af94ff13.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 770KB - Virtual size: 772KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE