htrysas
Behavioral task
behavioral1
Sample
1d7ea54b50bcf6b8cc4cbcdfec8e786c40b2b9d1c383a33d5e40bbd7dc9580bd.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
1d7ea54b50bcf6b8cc4cbcdfec8e786c40b2b9d1c383a33d5e40bbd7dc9580bd.dll
Resource
win10v2004-20230915-en
General
-
Target
1d7ea54b50bcf6b8cc4cbcdfec8e786c40b2b9d1c383a33d5e40bbd7dc9580bd
-
Size
1.6MB
-
MD5
2f08805f40538cf2768bdc91e9f8847f
-
SHA1
0e65be0087792cd9fd197889d910fd738a77bb69
-
SHA256
1d7ea54b50bcf6b8cc4cbcdfec8e786c40b2b9d1c383a33d5e40bbd7dc9580bd
-
SHA512
304cc50bf6a861e37afc59919c60445d988e425b4d21de05cf968125316b2b675998ad9402bb22039f69300c5558416eeebaa96911569a668bcaaf3cb65781f9
-
SSDEEP
49152:mbU4OkOd6VCASD1UJFg8bECIUhoT0DbDOko:mL7cLCpoADbQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1d7ea54b50bcf6b8cc4cbcdfec8e786c40b2b9d1c383a33d5e40bbd7dc9580bd
Files
-
1d7ea54b50bcf6b8cc4cbcdfec8e786c40b2b9d1c383a33d5e40bbd7dc9580bd.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.UPX1 Size: - Virtual size: 4.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.UPX1 Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE