Behavioral task
behavioral1
Sample
3caaca7a1c79dd6d414aa15a2a331f3c.dll
Resource
win7-20231215-en
General
-
Target
3caaca7a1c79dd6d414aa15a2a331f3c
-
Size
107KB
-
MD5
3caaca7a1c79dd6d414aa15a2a331f3c
-
SHA1
ede03a0d58b08a604db318bd18dc9b1880b746ac
-
SHA256
54ccd2c19a648eda593207473a86363886d7f700ff2339c43c6486f5d5f6bcbb
-
SHA512
184e421ad82b0d9ec3042a6f468fb9f9af3b50957d49c202757526399a6a0d12f040037d44adea1eb994afa844b16fe72cf716ac5f2c379fd1540e3997c180a5
-
SSDEEP
1536:HS+RsJKtqT+rF3YsOJpB022/XlatiKvwp2zv1E6ekZ3yLBvACD:H9NrmpBS/XlatiKNE6l3y1vT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3caaca7a1c79dd6d414aa15a2a331f3c
Files
-
3caaca7a1c79dd6d414aa15a2a331f3c.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE