Behavioral task
behavioral1
Sample
78e32958066963a0b814ab2c0c2f451b.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
78e32958066963a0b814ab2c0c2f451b.dll
Resource
win10v2004-20231215-en
General
-
Target
78e32958066963a0b814ab2c0c2f451b
-
Size
64KB
-
MD5
78e32958066963a0b814ab2c0c2f451b
-
SHA1
69da4f704d71ad185c0201fbbb3f30042c7bc712
-
SHA256
ec8f26a75d3fb7a7ce21e6050aee97d92920edd4a0c43e8a1ad5585f1a46cd65
-
SHA512
0363ab10ae5c0a4a95c45bbd8975f0b43f53cf81e9a0934d19b2c572e99821f56b79d4f1f893a0ee10b1f03f4ffbb633f783e721031c58bb6d556f805cd18a20
-
SSDEEP
1536:ryoALtFHRx0I6++RYeV0lNrzrlP5U49f+EyM:rNALDuI7rzrRDmEyM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 78e32958066963a0b814ab2c0c2f451b
Files
-
78e32958066963a0b814ab2c0c2f451b.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 468KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 231KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE