htrysas
Behavioral task
behavioral1
Sample
85eb19134e5a0286fb07eac596848763a34eb2af0aacaeaa301df0c1d16bf1d5.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
85eb19134e5a0286fb07eac596848763a34eb2af0aacaeaa301df0c1d16bf1d5.dll
Resource
win10v2004-20230915-en
General
-
Target
85eb19134e5a0286fb07eac596848763a34eb2af0aacaeaa301df0c1d16bf1d5
-
Size
1.6MB
-
MD5
57cef9e73fc6a5c5282d8526cb633a8d
-
SHA1
74c775b8e6c4e8e893ad5ea5e44272452c765176
-
SHA256
85eb19134e5a0286fb07eac596848763a34eb2af0aacaeaa301df0c1d16bf1d5
-
SHA512
f0665fd4dca78e259d232ae09c46f6886d35d02c1adbc584d94278df7fe0c94c7c8364c14c3752b62dd50a708e006f50a1ef4300302463906b7a85ecd3ff48f0
-
SSDEEP
24576:RccLt59JKNx8tI4FzDvb/VaMleCWTu1BTXH6B798OCmKt3IjgJMwanBkjc:RnJnEyDbcTxTun+7K3IccKc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 85eb19134e5a0286fb07eac596848763a34eb2af0aacaeaa301df0c1d16bf1d5
Files
-
85eb19134e5a0286fb07eac596848763a34eb2af0aacaeaa301df0c1d16bf1d5.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.UPX1 Size: - Virtual size: 4.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.UPX1 Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE