Behavioral task
behavioral1
Sample
c4f2eca8c71da8ff6ad0f99dc4578d02.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
c4f2eca8c71da8ff6ad0f99dc4578d02.dll
Resource
win10v2004-20240226-en
General
-
Target
c4f2eca8c71da8ff6ad0f99dc4578d02
-
Size
2.6MB
-
MD5
c4f2eca8c71da8ff6ad0f99dc4578d02
-
SHA1
cbb87237ab75a88957c706ef695da31947a6a4b9
-
SHA256
8d4300c776469c097724018f88b9d44585a44e7b2d7d8eda2c006abda28865c7
-
SHA512
73c5ad386fdb6963dba1b78291e6659fa406a73d8362c3e689e346548c14051e7c490d202dc4041988ccadc2fc5e92ce231bd2ffd58aab146a949b49aae505b3
-
SSDEEP
24576:JbGTekI4DInIAIX8i0nK6Efeq3r6QHSaciwFMhumU4I2C:JbGSkI4DR8i0pAeqWQhpwqgmE2C
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c4f2eca8c71da8ff6ad0f99dc4578d02
Files
-
c4f2eca8c71da8ff6ad0f99dc4578d02.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 888KB - Virtual size: 892KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE