Behavioral task
behavioral1
Sample
c2e8ccc9cae23df63a356a9e3f4de38b.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c2e8ccc9cae23df63a356a9e3f4de38b.dll
Resource
win10v2004-20240226-en
General
-
Target
c2e8ccc9cae23df63a356a9e3f4de38b
-
Size
936KB
-
MD5
c2e8ccc9cae23df63a356a9e3f4de38b
-
SHA1
74033310e578677dedd8e4cc261d8c1e39bf2250
-
SHA256
d690a7eb3359dbae991ead8a05c98122a07ae2f0099a5e8d3ede621618efaa7f
-
SHA512
6d40995e6cbd6ab39ac6d98f26a0283fa8d78649eca945af308d5b782db3ea88be971640b446dcf2e41028db6331029eea16aaf6e057ecda8d3665f0b9241785
-
SSDEEP
24576:3MFLNwSYWmfI5YvXDfHhudEEhZTkYwiRZMG/h67:BIG/NudE6TdDMG/h
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c2e8ccc9cae23df63a356a9e3f4de38b
Files
-
c2e8ccc9cae23df63a356a9e3f4de38b.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 932KB - Virtual size: 936KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE