scan
Behavioral task
behavioral1
Sample
c85afe79fe9858803a0f2d4a936ef21a.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c85afe79fe9858803a0f2d4a936ef21a.dll
Resource
win10v2004-20240226-en
General
-
Target
c85afe79fe9858803a0f2d4a936ef21a
-
Size
15KB
-
MD5
c85afe79fe9858803a0f2d4a936ef21a
-
SHA1
905d66312ad7c0a12df9b6ef995899fc0838bf7b
-
SHA256
5659e0911d2d6423bf5897be67c7bb8c717fe23f765fece48bc4be42d631a0b0
-
SHA512
fa71d52def42f1f377d68032611e92728546f9761b856d7bf218fca766e73a9a6d7930d7dcbb4415a8089885cfa0980e87581de72f8030ee318b247c0b765ea8
-
SSDEEP
384:2KlGk+9XxpDaArDbZuaHzvF/HlDrvC9NjRWLnYof:2K9+ZxBaArDEYzF/HJjUVRWLnp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c85afe79fe9858803a0f2d4a936ef21a
Files
-
c85afe79fe9858803a0f2d4a936ef21a.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE