Behavioral task
behavioral1
Sample
2a6d92575882a3813f60b0ccd5768642.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2a6d92575882a3813f60b0ccd5768642.dll
Resource
win10v2004-20231215-en
General
-
Target
2a6d92575882a3813f60b0ccd5768642
-
Size
30KB
-
MD5
2a6d92575882a3813f60b0ccd5768642
-
SHA1
3f711343f2d1cabed7ac1fa53777a4349ddd1065
-
SHA256
70b765705cba39ce12e1bb281a276396a399a8bfcc0fd755e4242dc1195a9967
-
SHA512
0089badc635318ee50f1dec3d6f856868d41dbc1902e7d8e8c8a90d888c0a027c0f179624721774ccb4ebf9775ceceeb7bdf58be1aa4e288afb1ee306bda1ea1
-
SSDEEP
768:DwPmIp0LnxViYLeXZASnw2F2cMjST2JUuXjZU8e:DweIKLnviY89nJFQM2JU1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a6d92575882a3813f60b0ccd5768642
Files
-
2a6d92575882a3813f60b0ccd5768642.dll windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE