scan
Behavioral task
behavioral1
Sample
8c9c030764a33d2d52f5a717969d0d4e.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8c9c030764a33d2d52f5a717969d0d4e.dll
Resource
win10v2004-20231222-en
General
-
Target
8c9c030764a33d2d52f5a717969d0d4e
-
Size
15KB
-
MD5
8c9c030764a33d2d52f5a717969d0d4e
-
SHA1
53616e8bee609f99336ad7b7f064d7af5b5bc845
-
SHA256
105d1dd13bf3a7a96236be0fc7feb557a866458e872f4f662a94222bf517b339
-
SHA512
ffd444b12285afb90095aa5a8b7ea64a955cbb4498a274299dc457d7d58e7695799f21429d26fb8a362a656a64c33337346d96b0a3c353dcbc0396545c64dd62
-
SSDEEP
384:k2/cY1tan0WukkPnw11m6MrctB4eeTbO6VssB4m+30dP:k251t7Jrnw26BtWe4zVssh+q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c9c030764a33d2d52f5a717969d0d4e
Files
-
8c9c030764a33d2d52f5a717969d0d4e.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE