Behavioral task
behavioral1
Sample
1b0c219c3fcb1bb7bea72978a7fae18e.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1b0c219c3fcb1bb7bea72978a7fae18e.dll
Resource
win10v2004-20231222-en
General
-
Target
1b0c219c3fcb1bb7bea72978a7fae18e
-
Size
3KB
-
MD5
1b0c219c3fcb1bb7bea72978a7fae18e
-
SHA1
455739ef1daf085ec6b959ab1d938ecf40c2deea
-
SHA256
e5c8c31708cc5efe9402e69dc3bdefa3f64732e116bd3f5b93c58f9ad7b6d033
-
SHA512
8f6cccba99f4b4a919a4414d3bec747d6134ae5808fdb0e77f2da3dff571f9322cd9a137f81d4ed2462317e2681c025b13e626bd5b726cc4e3675bc11fef9dde
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b0c219c3fcb1bb7bea72978a7fae18e
Files
-
1b0c219c3fcb1bb7bea72978a7fae18e.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: - Virtual size: 303KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
_TEXT Size: - Virtual size: 431B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.UPX0 Size: - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPX1 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.tls Size: 512B - Virtual size: 24B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPX2 Size: 287KB - Virtual size: 286KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ