DriverProc
Behavioral task
behavioral1
Sample
dd1a8bc514461adbf1237bdfd6b9c371c877b1dfdfb3f69d4ca7639dcdb1b2a0.dll
Resource
win7-20240903-en
General
-
Target
dd1a8bc514461adbf1237bdfd6b9c371c877b1dfdfb3f69d4ca7639dcdb1b2a0
-
Size
102KB
-
MD5
be2ec0278047b9d25e1d01d42cf759f3
-
SHA1
fa7869d128e792e4c97d155b646c1ced737183f8
-
SHA256
dd1a8bc514461adbf1237bdfd6b9c371c877b1dfdfb3f69d4ca7639dcdb1b2a0
-
SHA512
7405c8dda6cd3e2f7ef294c8a3851539be7a9c204f6c77a6f8f83b6836ec96746ff35bf99b53cb1c00c09cbfd0f7318c8eb10846c8abaa622af23e882b25af93
-
SSDEEP
1536:EpqFMh8AgSYSFwfIU50vGiSVJmfeyBsn+7i12gUWJukjsEgTzRK//WPvHZ5bd:QqrABvwQU50vGiQ7y7W12gxL3/ovHbb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd1a8bc514461adbf1237bdfd6b9c371c877b1dfdfb3f69d4ca7639dcdb1b2a0
Files
-
dd1a8bc514461adbf1237bdfd6b9c371c877b1dfdfb3f69d4ca7639dcdb1b2a0.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 116KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE