Behavioral task
behavioral1
Sample
275cab2599793449b3457348d17b1eda852115f248d45a3de5ad77b953bce954.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
275cab2599793449b3457348d17b1eda852115f248d45a3de5ad77b953bce954.dll
Resource
win10v2004-20231215-en
General
-
Target
73f7c1a3e249a56c0f695ff4ecb011cc.bin
-
Size
721KB
-
MD5
e64ced376c34a3d9ef9ce303aa277cb1
-
SHA1
80b6a7cf36366df66ab6003115cc50f21fef8c39
-
SHA256
de0d0e4e1f1f100b2c10471fde29dc0e2e64d79fc9c3da1a6c700dcadb00905a
-
SHA512
e26fe58c86fd8cd6b6a548598594f3f8ec47cab5a627787f0c9656bcb3666f6126a19e7bdfe15ad4b6ead6e21d1b5ae188f67e3d0b94545c260c2af7329cc3bd
-
SSDEEP
12288:QDlB+1AOBEm9zOtwUiBF9Sj0VNeIWr8GJO3q7nx+BPSEwxCUw3JZKO:0B+55JOtwUiBFfVNnDKOIxoPM7w3JX
Malware Config
Signatures
-
resource yara_rule static1/unpack001/275cab2599793449b3457348d17b1eda852115f248d45a3de5ad77b953bce954.dll upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/275cab2599793449b3457348d17b1eda852115f248d45a3de5ad77b953bce954.dll
Files
-
73f7c1a3e249a56c0f695ff4ecb011cc.bin.zip
Password: infected
-
275cab2599793449b3457348d17b1eda852115f248d45a3de5ad77b953bce954.dll.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE