init_windows_
Behavioral task
behavioral1
Sample
4740c323196c48d2e7885e60b3378b35f9cb5ee9b7dd115c67812fe551fc14d6.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
4740c323196c48d2e7885e60b3378b35f9cb5ee9b7dd115c67812fe551fc14d6.dll
Resource
win10v2004-20240508-en
General
-
Target
4740c323196c48d2e7885e60b3378b35f9cb5ee9b7dd115c67812fe551fc14d6
-
Size
160KB
-
MD5
6f5f3a4058733741872729585feaa80a
-
SHA1
ad049c63707d4b3dbe676a9eed59396eef92f467
-
SHA256
4740c323196c48d2e7885e60b3378b35f9cb5ee9b7dd115c67812fe551fc14d6
-
SHA512
95aa7b9e53a87c1d89a1374081fa92459d2841fce9d1dcd85bdf66f33e702b4803ab3ba489b9d64211297bd255975677dda7691815140c2faa1f33a9cd54f540
-
SSDEEP
3072:pGbumnL3oRAnb0R16dhfNSzqNZiATlIdWnjJEXc+i6q4GQAFbQtRx:pGbumnLoAO6dRNZ6ECYJ1B6TBAFbCRx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4740c323196c48d2e7885e60b3378b35f9cb5ee9b7dd115c67812fe551fc14d6
Files
-
4740c323196c48d2e7885e60b3378b35f9cb5ee9b7dd115c67812fe551fc14d6.dll windows:5 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 960KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 157KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE