Behavioral task
behavioral1
Sample
05bd3c4fee91f5393fb9aa9a0591b365.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
05bd3c4fee91f5393fb9aa9a0591b365.dll
Resource
win10v2004-20231215-en
General
-
Target
05bd3c4fee91f5393fb9aa9a0591b365
-
Size
60KB
-
MD5
05bd3c4fee91f5393fb9aa9a0591b365
-
SHA1
d5e736d0ff9e7cdd7584e636206fbef1499fe5be
-
SHA256
e817842a076d9dab1d144835bbc97724c7d7ade0e1b8b420d2112e260955d764
-
SHA512
637eeb82cd8815917b051fd61569be7244973fdbc8fbda6f16ac79bcfdc7387f4eae8d9f1ec18d147d1ef5031047aa283e7d84f773193e1314511f748a27aafa
-
SSDEEP
1536:XOfYNU4WI7vrboiUtKIyQlyzOA/TNQbZ8KU6g17hWOZ7nFS:XkYCQ7w9opmAxIf+7Mk70
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05bd3c4fee91f5393fb9aa9a0591b365
Files
-
05bd3c4fee91f5393fb9aa9a0591b365.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 384KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 231KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE