Behavioral task
behavioral1
Sample
633ee49921f8acdc83625d9fee9ffc9ea6c34efa4a8f61a929643dbefb6b20a1.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
633ee49921f8acdc83625d9fee9ffc9ea6c34efa4a8f61a929643dbefb6b20a1.dll
Resource
win10v2004-20240709-en
General
-
Target
633ee49921f8acdc83625d9fee9ffc9ea6c34efa4a8f61a929643dbefb6b20a1.dll
-
Size
6.7MB
-
MD5
41e07c29d6d8234ebac54aa8c5507a22
-
SHA1
3d95d63705a33ab4ee3ecdc9459c630c2fe63530
-
SHA256
633ee49921f8acdc83625d9fee9ffc9ea6c34efa4a8f61a929643dbefb6b20a1
-
SHA512
c2d6bc10fb5063b4edf8d62fc7512850f513af6726a56661b20262c4e07ecc359e98d84b659f5491346ee6a8841db28ed4675a111794a1ecfa38f316907ef5d9
-
SSDEEP
49152:lqILdjs3c7mVGU3WJi1aCOjS12c2rQ+SMSA4TXWSeSeUgyWlc/bfRN7D9neD1iGl:w3c7IlBln/JbWEC9n
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 633ee49921f8acdc83625d9fee9ffc9ea6c34efa4a8f61a929643dbefb6b20a1.dll
Files
-
633ee49921f8acdc83625d9fee9ffc9ea6c34efa4a8f61a929643dbefb6b20a1.dll.dll windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 3222.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 1.7MB - Virtual size: 3227.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX2 Size: 512B - Virtual size: 3229.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE