Behavioral task
behavioral1
Sample
SecuriteInfo.com.Variant.Zusy.551321.399.736.dll
Resource
win7-20240508-en
General
-
Target
SecuriteInfo.com.Variant.Zusy.551321.399.736.dll
-
Size
4.7MB
-
MD5
2d50abb15c4fbb426826c2bd0dfdaf61
-
SHA1
3a62a420cd8ba2dffa40ebcdf311205c5b76b0a4
-
SHA256
6d456977f4d338c27ace3a30a24d10959c27101326bb015300059ed5ca6f57b8
-
SHA512
eea037d213d738b2855c7bf7469d8ad26afa47f6220ae655c18a83b56144357e77a004fdf92405209bc56cdc8fd79a40f0119d96fd7c8281cbe40ffb8ebcc8c5
-
SSDEEP
98304:/vJn7kuoqbKUPStwdHdWa+u+j0p9G7p47uolu4Jc4AqKnnCElfza8/a2bxuH:HN7aqbK9wHsuIPapuccSenCUfG4G
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Variant.Zusy.551321.399.736.dll
Files
-
SecuriteInfo.com.Variant.Zusy.551321.399.736.dll.dll windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 1.3MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 510KB - Virtual size: 957KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 104KB - Virtual size: 375KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 6KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 87KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 4.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 16B - Virtual size: 4KB
IMAGE_SCN_MEM_READ