htrysas
Behavioral task
behavioral1
Sample
70ba003fc97536750a00bec7683e9ac5f2000a39cee3134b901dc6e96b26fcfd.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
70ba003fc97536750a00bec7683e9ac5f2000a39cee3134b901dc6e96b26fcfd.dll
Resource
win10v2004-20230703-en
General
-
Target
70ba003fc97536750a00bec7683e9ac5f2000a39cee3134b901dc6e96b26fcfd
-
Size
1.5MB
-
MD5
3a87b9e1d5958fda00ccf8652580e7c9
-
SHA1
35631a2f528964142ae61864f928329b383977d6
-
SHA256
70ba003fc97536750a00bec7683e9ac5f2000a39cee3134b901dc6e96b26fcfd
-
SHA512
5b082326dbd1c20b0ea8b10cc629912426b4f16eb76fa86d70790f81a4ca522b383df867b480060554f5ad9d0a8746ee4bd486d967042c9f82c5755693304505
-
SSDEEP
24576:HlBh+hPiX8FN9JntaWw0p19MHsf/8rElVyW/JQ1WZR9ZXXqsF5W0RdGQ:FD+hKXMNr4WwNHsX8Sy1onXhFHdGQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70ba003fc97536750a00bec7683e9ac5f2000a39cee3134b901dc6e96b26fcfd
Files
-
70ba003fc97536750a00bec7683e9ac5f2000a39cee3134b901dc6e96b26fcfd.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.UPX1 Size: - Virtual size: 4.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.UPX1 Size: 1.5MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE