Behavioral task
behavioral1
Sample
97949685ce72912f932f67cd068b5cfb.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
97949685ce72912f932f67cd068b5cfb.dll
Resource
win10v2004-20231215-en
General
-
Target
97949685ce72912f932f67cd068b5cfb
-
Size
128KB
-
MD5
97949685ce72912f932f67cd068b5cfb
-
SHA1
a3a177639020e485100dadc21ef5eb1dff3a338f
-
SHA256
e19ad967594f7a16fa5bb378b3f8de712306fd9253742aad2e33d62885078e89
-
SHA512
79ce8d71c5f2a3f4046c0ab2eda0e97edc68b2bfe27111cb8789b0b834fcfde00878fe6dc784581a33c36e0ee704554e21faf8af6cabddd87981993f9c2d55b9
-
SSDEEP
1536:oRp/WoN8NXCsWItmupjuuh4GROzCuTEFkezARbf3At0b7tU6hqhb6zd5huYPNBWI:Wp/WP8G42Ovi+K0b7O8ztFBc4eYC/fgj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 97949685ce72912f932f67cd068b5cfb
Files
-
97949685ce72912f932f67cd068b5cfb.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 616KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 506KB - Virtual size: 508KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE