FightInterface
Behavioral task
behavioral1
Sample
6e5ce3afafdc68c05e8b167f5afad4d9c91c6272e592614fb1c47bb4647a3d9f.dll
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
6e5ce3afafdc68c05e8b167f5afad4d9c91c6272e592614fb1c47bb4647a3d9f.dll
Resource
win10v2004-20231020-en
General
-
Target
6e5ce3afafdc68c05e8b167f5afad4d9c91c6272e592614fb1c47bb4647a3d9f
-
Size
1.5MB
-
MD5
09a54f0081c78cde3b434e679025fd45
-
SHA1
e12ce0d0aa18c89a3c6ca4abe23b7440555581cc
-
SHA256
6e5ce3afafdc68c05e8b167f5afad4d9c91c6272e592614fb1c47bb4647a3d9f
-
SHA512
0451b42e2ac4fdde4d15851c104ba60fb040d87129470a1376d3c01c17f5ea39dbf7401ef5fe9bde58096e9506925a247babff65a3c2f3cbaa1800f2b32f0942
-
SSDEEP
49152:7vzmuaiFOwpCXOUCoriMxkyzi54Pc+75F4:7vzm2FRCeUCozR175F4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6e5ce3afafdc68c05e8b167f5afad4d9c91c6272e592614fb1c47bb4647a3d9f
Files
-
6e5ce3afafdc68c05e8b167f5afad4d9c91c6272e592614fb1c47bb4647a3d9f.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.UPX1 Size: - Virtual size: 4.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.UPX1 Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE