scan
Behavioral task
behavioral1
Sample
42a59ac40b8d1ee55b93ca8729a50503.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
42a59ac40b8d1ee55b93ca8729a50503.dll
Resource
win10v2004-20231215-en
General
-
Target
42a59ac40b8d1ee55b93ca8729a50503
-
Size
15KB
-
MD5
42a59ac40b8d1ee55b93ca8729a50503
-
SHA1
4b36276f540e209c32c22bf78309d25b4b05b712
-
SHA256
0bcbf5d0d58c3110c53e49534cc02bbadab904ab587d2b009d3bba705bc6375a
-
SHA512
95b962537ff5117c55fbd4bce102c33993eec4e5840032f8945bbf96add9c05da390f811612ce1f3ca8a4ae6bcf5ecf0f9d1eed2bb5bdc4454e46cf13af46f51
-
SSDEEP
384:mA+ulGaSOzx3iBE+oEUlW0FI4VeRWIjbgMe:fXld3iBEzWbRNbgMe
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42a59ac40b8d1ee55b93ca8729a50503
Files
-
42a59ac40b8d1ee55b93ca8729a50503.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE