Behavioral task
behavioral1
Sample
9945b1093d70f3c1b478b4658bb047cf.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
9945b1093d70f3c1b478b4658bb047cf.dll
Resource
win10v2004-20231222-en
General
-
Target
9945b1093d70f3c1b478b4658bb047cf
-
Size
16KB
-
MD5
9945b1093d70f3c1b478b4658bb047cf
-
SHA1
62849d7f9300782c043f976c763b388836b051d4
-
SHA256
82974a245e789e3c69598261f4560817ed4805b033d7204f6b5584890f178a01
-
SHA512
ed9584306da8f3825d4090776b4b755a1c679cd0278f86bf6fcc99921093868148738d179eeafa91797ad58f6cd3e6382f01b8ff74427d99728a17487ae91afb
-
SSDEEP
384:msWnwfpB7PbWf7BDLQ8QFa0R+QflX0C48xm6F52roc3waJ0o:GMvWfVDcxfR+M+AmMHaBz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9945b1093d70f3c1b478b4658bb047cf
Files
-
9945b1093d70f3c1b478b4658bb047cf.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE