Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.CrypterX-gen.13288.14467.dll
Resource
win7-20240903-en
General
-
Target
SecuriteInfo.com.Win32.CrypterX-gen.13288.14467.dll
-
Size
2.7MB
-
MD5
9f79b4c25379219a7f0ca16326d8089e
-
SHA1
3cfb6f013f58a66d9311af4fb748b97938189bc2
-
SHA256
589c71d55b02c2cc80e9f0a182e199a3512614af7363d1a0850edddbbbb84bf3
-
SHA512
92bb122023e6c8a9c087ab15a370655a2e6fbf1f41a44664d5fc56ccb4d970b3bf0a3c6e074af75023a177b1baeca8e0b37d4ed4d2f4b8fd2e12bb6868b223d8
-
SSDEEP
49152:vzG45y6k3j5tTL4ftJdSEaSi1enCL8mtA40mi4wH8gX2JKOTxFzf+h:vy0bSPwlJdpaRj/0OWXunxFq
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Win32.CrypterX-gen.13288.14467.dll
Files
-
SecuriteInfo.com.Win32.CrypterX-gen.13288.14467.dll.dll windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 557KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 337KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 117KB - Virtual size: 571KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 41KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 16B - Virtual size: 4KB
IMAGE_SCN_MEM_READ