Behavioral task
behavioral1
Sample
39523f11a06e1d9efc7fba9345555468744f20447cc40a6ec44ef62eb07ec37a.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
39523f11a06e1d9efc7fba9345555468744f20447cc40a6ec44ef62eb07ec37a.dll
Resource
win10v2004-20240419-en
General
-
Target
39523f11a06e1d9efc7fba9345555468744f20447cc40a6ec44ef62eb07ec37a
-
Size
205KB
-
MD5
468c707dbc9620dfd3291e4889065ac5
-
SHA1
2f301e62eb69857c55a53ecca127a32559a37f59
-
SHA256
39523f11a06e1d9efc7fba9345555468744f20447cc40a6ec44ef62eb07ec37a
-
SHA512
4be280a2a7175b56eeda8dc34fdfd2a70e9fbeb1390de3d07fa01d0923dce92632cb7fb1e6b2dacad67b10c8d5d34634faee5227e3ab7f97a3f680e8f350bf46
-
SSDEEP
3072:VzN0u4fpObi3fpT/N7AXdMJip3bAUpEvzeoY4FeMMcyrLRLQBpp1:V/1mP9l7AXdQebAUDohty9QfP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39523f11a06e1d9efc7fba9345555468744f20447cc40a6ec44ef62eb07ec37a
Files
-
39523f11a06e1d9efc7fba9345555468744f20447cc40a6ec44ef62eb07ec37a.dll windows:5 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 2048.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 84KB - Virtual size: 2048.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 2048.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE