FightInterface
Behavioral task
behavioral1
Sample
b5ad06212ac5d3055176ccfab4779baebbb46c58349caef64b9a5a8a63c50dfc.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
b5ad06212ac5d3055176ccfab4779baebbb46c58349caef64b9a5a8a63c50dfc.dll
Resource
win10v2004-20230915-en
General
-
Target
b5ad06212ac5d3055176ccfab4779baebbb46c58349caef64b9a5a8a63c50dfc
-
Size
1.5MB
-
MD5
c3c599db9b3efb1b2196a2f9529c1401
-
SHA1
04869025c0ee9472dc62b59c901717b7cba54b33
-
SHA256
b5ad06212ac5d3055176ccfab4779baebbb46c58349caef64b9a5a8a63c50dfc
-
SHA512
cfec67645bf08bfd263e6dc9b474e373ff7a63afb547036b68bb9ff4567197489470168c9e5071ca98c0231eb2be1a4701ba71636e0c1476ec6284b1fa3fd8f5
-
SSDEEP
49152:QQHjmgp3raD3GgBI3BnUP336lLjDosXg/ucdqctj:TmvWgBI3BUyXfc4+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5ad06212ac5d3055176ccfab4779baebbb46c58349caef64b9a5a8a63c50dfc
Files
-
b5ad06212ac5d3055176ccfab4779baebbb46c58349caef64b9a5a8a63c50dfc.dll windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.UPX1 Size: - Virtual size: 4.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.UPX1 Size: 1.5MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE