scan
Behavioral task
behavioral1
Sample
c56e1407d4c716c5229a5e4da6affc62.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c56e1407d4c716c5229a5e4da6affc62.dll
Resource
win10v2004-20240226-en
General
-
Target
c56e1407d4c716c5229a5e4da6affc62
-
Size
15KB
-
MD5
c56e1407d4c716c5229a5e4da6affc62
-
SHA1
e2bbb4fab4d52e84d74284d4abde3a3a781c162e
-
SHA256
35a6d825eee1f5e076cb0d51341e9373fb99ad5b498acf67aca81e2e5a4a73e0
-
SHA512
53d1f0030c03a668ba3feb19d45a39c126101330acbcce5627b897a7f06952a740b50d9855f525d54e94e810cda2db1408f76f0ef28cd9cb04455faf0290719b
-
SSDEEP
384:k3j41tRxgg9r9nxl/iM/7bjfZs2fj00/i:k81tRxgArhXf7XZsqX/i
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c56e1407d4c716c5229a5e4da6affc62
Files
-
c56e1407d4c716c5229a5e4da6affc62.dll windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE