htrysas
Behavioral task
behavioral1
Sample
a4b2417ca2cbf7d68778836a91b80ca56c2b0d229f16648723c71fec1ab44d39.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
a4b2417ca2cbf7d68778836a91b80ca56c2b0d229f16648723c71fec1ab44d39.dll
Resource
win10v2004-20230915-en
General
-
Target
a4b2417ca2cbf7d68778836a91b80ca56c2b0d229f16648723c71fec1ab44d39
-
Size
1.6MB
-
MD5
c2745c58315b35448ce6d6c91abda564
-
SHA1
81b9597455af0592cf6ca0452e2802acf7e2e130
-
SHA256
a4b2417ca2cbf7d68778836a91b80ca56c2b0d229f16648723c71fec1ab44d39
-
SHA512
f66061cd7b9609208d79c0e7f27fab7e68454638ac3ad3aece722ce5d2bbbdaec33de274f9b0a33880aa3e4c017da8621ad815d767e3e79f8cbb809f237097e5
-
SSDEEP
49152:EuTKVOAg4TWNwey6uU7ETcxxLThcIBzgJOFB:LTlADSysETcTLTOP+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a4b2417ca2cbf7d68778836a91b80ca56c2b0d229f16648723c71fec1ab44d39
Files
-
a4b2417ca2cbf7d68778836a91b80ca56c2b0d229f16648723c71fec1ab44d39.dll windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.UPX1 Size: - Virtual size: 4.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.UPX1 Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE