scan
Behavioral task
behavioral1
Sample
64533c27338f1ab3bf6c85212985776b.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
64533c27338f1ab3bf6c85212985776b.dll
Resource
win10v2004-20231215-en
General
-
Target
64533c27338f1ab3bf6c85212985776b
-
Size
16KB
-
MD5
64533c27338f1ab3bf6c85212985776b
-
SHA1
8ee95b91df3f3a471a908c7b8d9be069698107f7
-
SHA256
bd635b3a270c77d7ee5aa082a16a8fb23932cde9be7c37c761d8794b85cb12bc
-
SHA512
67ada70897fe843bd84d742dadaf2202e35987eab0c9d77af6a2dbdbe75e5e285ef398daf9099b051dbfefbcd0b99ff32a1383e8480c71ed0318faced8e08d2e
-
SSDEEP
384:ZE4d2XJ+qsJHqshjsx/waLkMiSJNvzC123pvhXJ9s73:1d2XQqs0sixvkYj8Eds73
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64533c27338f1ab3bf6c85212985776b
Files
-
64533c27338f1ab3bf6c85212985776b.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE