Behavioral task
behavioral1
Sample
cd35150583fe0cfb5927df8f0c238102.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cd35150583fe0cfb5927df8f0c238102.dll
Resource
win10v2004-20240226-en
General
-
Target
cd35150583fe0cfb5927df8f0c238102
-
Size
16KB
-
MD5
cd35150583fe0cfb5927df8f0c238102
-
SHA1
6d3e6578cdc871de5db7a9895df54fb911e95650
-
SHA256
d61a5073d92947a7d4269c2bb8e2f89cf380412240441d4fbf921fd3dfdb2d72
-
SHA512
e80b17ad3336e38f5541b954e213b086ff1976f8f6ca1d5501fbf269b7774c8e6e378c2f6ef190ac09194161f12def4c37b7c8d7ecf64a6185ecf63b7eb71fb4
-
SSDEEP
384:4r0BG0eiyAikmg9bdWdBcKjizEQYyZRGvf1pwECySfSwwOgInGuj1ThI:20Bfei3ygLKqfRGX1pwECpfSFPInb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cd35150583fe0cfb5927df8f0c238102
Files
-
cd35150583fe0cfb5927df8f0c238102.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPXA Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPXB Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE