Behavioral task
behavioral1
Sample
8e24044a096882b252176fd57b7903a647dfe518d1635f01abb99e36fb111302N.dll
Resource
win7-20240903-en
General
-
Target
8e24044a096882b252176fd57b7903a647dfe518d1635f01abb99e36fb111302N
-
Size
1019KB
-
MD5
fedab8b7e1ad876936b14eb73c7f6ee0
-
SHA1
1be04791d09bf6fbb1dba2f67d2f9e8131956afb
-
SHA256
8e24044a096882b252176fd57b7903a647dfe518d1635f01abb99e36fb111302
-
SHA512
0714d7781633bac655ade26a28d57e455df3c15558273f39af25ce7294131ac25cbc9ca63f93ae1dde4b4ebeb56c63b6440c9c52ff8d4180a6ed5feff294e505
-
SSDEEP
24576:DJ1mx25fahGRwzeRLgvqmfwwOBgh4Qsyj5h/:yyagRwzeRMyAwnBu45i7/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e24044a096882b252176fd57b7903a647dfe518d1635f01abb99e36fb111302N
Files
-
8e24044a096882b252176fd57b7903a647dfe518d1635f01abb99e36fb111302N.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1015KB - Virtual size: 1016KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE