PSGetPF
Behavioral task
behavioral1
Sample
f35b411f1c7f97f443bbc43a57c23e66bbf1ac3c92a91a4df4b4e8f4843396f8.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
f35b411f1c7f97f443bbc43a57c23e66bbf1ac3c92a91a4df4b4e8f4843396f8.dll
Resource
win10v2004-20240508-en
General
-
Target
f35b411f1c7f97f443bbc43a57c23e66bbf1ac3c92a91a4df4b4e8f4843396f8
-
Size
117KB
-
MD5
c5e8e29f07b8a293d58422cad160b410
-
SHA1
ff799411100a17f69f78fb69f5a82780695a0a0e
-
SHA256
f35b411f1c7f97f443bbc43a57c23e66bbf1ac3c92a91a4df4b4e8f4843396f8
-
SHA512
59cbebfccc8b205888b0ec7ea826db5f7e2290d5588cd5baf222c8723f77a97b7244bf263f27d06eebe67fb71691961c44f5c56a017fba0c00161e1739facdb5
-
SSDEEP
3072:7aZqoOrF6twMfhvKMlAj8I5eo5kNBawVz27d+om2:OZqoOraoMlHIliBaKz2xQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f35b411f1c7f97f443bbc43a57c23e66bbf1ac3c92a91a4df4b4e8f4843396f8
Files
-
f35b411f1c7f97f443bbc43a57c23e66bbf1ac3c92a91a4df4b4e8f4843396f8.dll windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 288KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 114KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE