Behavioral task
behavioral1
Sample
344f6e0986d6ed43140b58c390679e68.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
344f6e0986d6ed43140b58c390679e68.dll
Resource
win10v2004-20231215-en
General
-
Target
344f6e0986d6ed43140b58c390679e68
-
Size
20KB
-
MD5
344f6e0986d6ed43140b58c390679e68
-
SHA1
0cbab71ffb72f6d63b41311602042e2d9f82ca13
-
SHA256
638f08f9a7030d81f165415f25cfaf3b21b849093fcb88e929cf67d9074ed348
-
SHA512
f97bb0748638e059233cee47edbad994649d9792fcb30e0d8aab09fb9eb1b3fe17945c9ede66411839e9f56b5b6a3d1c7dd9df3d10fba394bb0929996f4b43d4
-
SSDEEP
384:N/FTQAMHPDPu+nhaOXwMLbiNMiQIok7rGRTyn0oPQgzdfr8F2yITILK0G:HTeWqa4wq+/QIc9I0EbY2GdG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 344f6e0986d6ed43140b58c390679e68
Files
-
344f6e0986d6ed43140b58c390679e68.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 116KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE