scan
Behavioral task
behavioral1
Sample
19c56d5be71dfffc126a10a63eb7ee99.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
19c56d5be71dfffc126a10a63eb7ee99.dll
Resource
win10v2004-20231215-en
General
-
Target
19c56d5be71dfffc126a10a63eb7ee99
-
Size
14KB
-
MD5
19c56d5be71dfffc126a10a63eb7ee99
-
SHA1
f07b11790304a2317a447ee19bc249d8ee9c4534
-
SHA256
b49314e096e56eb76a34cfeb26c0201503d68728b506167719ffc40ac0ccdac8
-
SHA512
85dcb0f6c8019f78b797c8b97bc65838336f26f5a1a8abfd0f7e6fd511ef799f98a91c2ba35f6e25c0ec7ee54947a6e42433e21448d09a86e1d5987dcc0ac8c0
-
SSDEEP
384:O1LOFEn4DInVn/an2rerF0cxTGt/75cq6p:OL2En6Ml/avWcxTGghp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19c56d5be71dfffc126a10a63eb7ee99
Files
-
19c56d5be71dfffc126a10a63eb7ee99.dll windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE