Behavioral task
behavioral1
Sample
38e6d29864d12f71bac74dd3b3875a65.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
38e6d29864d12f71bac74dd3b3875a65.dll
Resource
win10v2004-20231222-en
General
-
Target
38e6d29864d12f71bac74dd3b3875a65
-
Size
16KB
-
MD5
38e6d29864d12f71bac74dd3b3875a65
-
SHA1
ff25de0676c5b5cfe491486182f789c216e6c35b
-
SHA256
944bb3ee8ab440fd1e9e41588f8a8e43b4a52413c254d5960d6d8401f26d3c69
-
SHA512
709cf21e85e8fbeaf967065adb7c64dce15ae9a0e86c102814735511f5b42ad49dce55caee14c3f323c6806dbcd636bc0ef52220c4ddea77cf937625755ba100
-
SSDEEP
384:7r0BG0eiyAikmg9bdWdBcKjizEQYyZRGvfrnO5ahvorgDZMAkAiCug700:X0Bfei3ygLKqfRGXrnOWvoiS4iCug71
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38e6d29864d12f71bac74dd3b3875a65
Files
-
38e6d29864d12f71bac74dd3b3875a65.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPXA Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPXB Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE