scan
Behavioral task
behavioral1
Sample
5a945fe8a0e16994627bcbf35a3a6e68.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5a945fe8a0e16994627bcbf35a3a6e68.dll
Resource
win10v2004-20231215-en
General
-
Target
5a945fe8a0e16994627bcbf35a3a6e68
-
Size
18KB
-
MD5
5a945fe8a0e16994627bcbf35a3a6e68
-
SHA1
624e0b4ce600214eb061abc75d52ec11774c92e5
-
SHA256
075cf683218a8ca6d127ca6681e1a538669df84a70d8d90f26df23e0dfd93e57
-
SHA512
91488c369f4f10e9db5486cd5f19eb80fb4b169bd0a20175b16c83e3c4e554691dad94870f8cfe76149a14857baaad06b04e706cffa5f944390c28f5b09a07bf
-
SSDEEP
384:mbI47KFWlL0OrPx7K4mGIAsfzF+yfJ7j9sNJE+8+PQSxoGq:G7KYg4PR2HHqNJntPQSxM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a945fe8a0e16994627bcbf35a3a6e68
Files
-
5a945fe8a0e16994627bcbf35a3a6e68.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE