htrysas
Behavioral task
behavioral1
Sample
e8c71c41854b8dad4ef813809d28918b6598675179cd591659c2cfeeec858dfb.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
e8c71c41854b8dad4ef813809d28918b6598675179cd591659c2cfeeec858dfb.dll
Resource
win10v2004-20230915-en
General
-
Target
e8c71c41854b8dad4ef813809d28918b6598675179cd591659c2cfeeec858dfb
-
Size
1.6MB
-
MD5
ab42702f1105e6a42eaca485ba4f2a43
-
SHA1
11f7756030fbd4a057665ba3c6ef6af3f5691eb5
-
SHA256
e8c71c41854b8dad4ef813809d28918b6598675179cd591659c2cfeeec858dfb
-
SHA512
05a491c9db7bbd37a9fb43284b6d6ad581920677eead6a1d9c105153a6fdf774c42917c86bb1dc88c74f22a59ddb5ab1f187cdee05376c6058c8f4bbdee51e04
-
SSDEEP
24576:Nk0UoLLvvtOkaFKzTZEGovBjw4/uHAqC919mBpSVaDRT9F886/jan2+lzBgtxLm5:6CPNDov2EkpSVOLi/ja3tgvibMsMa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e8c71c41854b8dad4ef813809d28918b6598675179cd591659c2cfeeec858dfb
Files
-
e8c71c41854b8dad4ef813809d28918b6598675179cd591659c2cfeeec858dfb.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.UPX1 Size: - Virtual size: 4.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.UPX1 Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE