Behavioral task
behavioral1
Sample
0cc5dc54c1d8aca74659fc932ef95dfc.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0cc5dc54c1d8aca74659fc932ef95dfc.dll
Resource
win10v2004-20231215-en
General
-
Target
0cc5dc54c1d8aca74659fc932ef95dfc
-
Size
4KB
-
MD5
0cc5dc54c1d8aca74659fc932ef95dfc
-
SHA1
fbbe9df894b74c03e432b397856d7a37d8a26876
-
SHA256
e1f09f32ca1dc279c6cfac12f0cc381dd33006870c57c22adef6b7c7c311db44
-
SHA512
aca2b54c2e815c2fd2cb25921c2c15b51b5ebb0165b5497dba8498be685b26e99bc32aeaf6ce26bc734bfa4d41b7498a4d2a2254499c5b9bec6992798781c824
-
SSDEEP
96:oUqVnzBxP2VJUnkta9IgytHEqvyC9FJw/in/FC0M:oXiVmnkvajg/FC0M
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cc5dc54c1d8aca74659fc932ef95dfc
Files
-
0cc5dc54c1d8aca74659fc932ef95dfc.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 81KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE