htrysas
Behavioral task
behavioral1
Sample
9b8ae4a8540a1f20f7fa75b6339671daa183f8765a7e733e124a480004240772.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
9b8ae4a8540a1f20f7fa75b6339671daa183f8765a7e733e124a480004240772.dll
Resource
win10v2004-20230703-en
General
-
Target
9b8ae4a8540a1f20f7fa75b6339671daa183f8765a7e733e124a480004240772
-
Size
1.5MB
-
MD5
007a774aea34593d6774acdfe2cc5be9
-
SHA1
e60690e820a6b3fa5275cc51a3c4ae3635644c28
-
SHA256
9b8ae4a8540a1f20f7fa75b6339671daa183f8765a7e733e124a480004240772
-
SHA512
4185d1def2813b7385a4318990433e2d682c2ecb3b136b4d35c46b09268fa7e6aafbda2578de946d60f87e9ff93bec1d77c3ef8993430f024ecff6f575ac2b9a
-
SSDEEP
24576:VMbhrUbfNpL6fqNa1363pqWU1QtGo9ttgJeFDUtKCgqBaeaZZONNUA4VFGUx17Iq:IrU3Giko9ttYtK1GN4n/0v+BVkvfF9+1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9b8ae4a8540a1f20f7fa75b6339671daa183f8765a7e733e124a480004240772
Files
-
9b8ae4a8540a1f20f7fa75b6339671daa183f8765a7e733e124a480004240772.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.UPX1 Size: - Virtual size: 4.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.UPX1 Size: 1.5MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE