FightInterface
Behavioral task
behavioral1
Sample
597eba30ed340b3d1cfede0c0bb525f0b6c70e3c06e9a0e97209a27c438ecd10.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
597eba30ed340b3d1cfede0c0bb525f0b6c70e3c06e9a0e97209a27c438ecd10.dll
Resource
win10v2004-20231023-en
General
-
Target
597eba30ed340b3d1cfede0c0bb525f0b6c70e3c06e9a0e97209a27c438ecd10
-
Size
1.5MB
-
MD5
042076e8c3e5541b1513bc73bf74407e
-
SHA1
e2643755ae9777c240669af70ffeb8939620ea31
-
SHA256
597eba30ed340b3d1cfede0c0bb525f0b6c70e3c06e9a0e97209a27c438ecd10
-
SHA512
566b0b808f7ed2f049d4e1916dbfb793f0fee69cc62387d4117662164ed156113acdb921645c200eb01aac666d8eee64603a60537e6347063bdc9058096389b9
-
SSDEEP
24576:yygGUD7nS/EF4NPn15tfswxhLi7FV+T8Afy5lJF+X3X0c46YxMWruEMZctkwMyGZ:EGO7nSX15JTifAc8HO6O/7jdE0OY7hK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 597eba30ed340b3d1cfede0c0bb525f0b6c70e3c06e9a0e97209a27c438ecd10
Files
-
597eba30ed340b3d1cfede0c0bb525f0b6c70e3c06e9a0e97209a27c438ecd10.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.UPX1 Size: - Virtual size: 4.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.UPX1 Size: 1.5MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE