Behavioral task
behavioral1
Sample
4fb1d69fd7d3cc4d326053a9a2f2ce89.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4fb1d69fd7d3cc4d326053a9a2f2ce89.dll
Resource
win10v2004-20231215-en
General
-
Target
4fb1d69fd7d3cc4d326053a9a2f2ce89
-
Size
15KB
-
MD5
4fb1d69fd7d3cc4d326053a9a2f2ce89
-
SHA1
184034b0303df8700b8cddcd30b174282954b094
-
SHA256
3f1627fcafcc62d82b723cc7f3d3ed8a0f41416a30dd81e1edb8bb047990925a
-
SHA512
110c16f8a93e003cac638392ded11a7d6cb723ae6cbf908be684f44ef99b1dc5d60f9a8c674f72d46681589c9437592cf67744b39d0cca05785fcf5652524843
-
SSDEEP
384:9MNEo4s+UQhORJuOBd26yHWv7RsseUuqbAtrSNi:+n+UQhiIOKPHct5uqGrZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4fb1d69fd7d3cc4d326053a9a2f2ce89
Files
-
4fb1d69fd7d3cc4d326053a9a2f2ce89.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE