Behavioral task
behavioral1
Sample
46ff9ec5f1ce5f7ab0b929945478e727.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
46ff9ec5f1ce5f7ab0b929945478e727.dll
Resource
win10v2004-20231215-en
General
-
Target
46ff9ec5f1ce5f7ab0b929945478e727
-
Size
16KB
-
MD5
46ff9ec5f1ce5f7ab0b929945478e727
-
SHA1
19434cc668506da7bc83bbf67dbb2653c49de853
-
SHA256
e0a611c35d85ed8ad1f0636a31f91f88b605aea0bd07b6358e6c1c328c811cdc
-
SHA512
29b7400394ba505068a72662f69f1993b8e61ad149c86ac0e83667e4b1400c71c11c005173f7ba0d3f1574c7e9b1a5bf37841bb0849ee7e15b7dfc41461384c0
-
SSDEEP
96:bAp+wXWzB5oAp+wXWzB5oAp+wXWzB5oAp+wXWzB5oAp+wXWzB5oAp+wXWzB5:b7DBe7DBe7DBe7DBe7DBe7DB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46ff9ec5f1ce5f7ab0b929945478e727
Files
-
46ff9ec5f1ce5f7ab0b929945478e727.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE