RunDllHostCallBack
Behavioral task
behavioral1
Sample
4df6e56d63029b1a9d0aad761cb34b168fd6d6a4862e61846ceea5f03b5784c6.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4df6e56d63029b1a9d0aad761cb34b168fd6d6a4862e61846ceea5f03b5784c6.dll
Resource
win10v2004-20220812-en
General
-
Target
4df6e56d63029b1a9d0aad761cb34b168fd6d6a4862e61846ceea5f03b5784c6
-
Size
110KB
-
MD5
67f6e45ead14ab34cb5c0495382278c8
-
SHA1
c5173a3ce21e0e0a0e5e95ac577a8e86d0c70843
-
SHA256
4df6e56d63029b1a9d0aad761cb34b168fd6d6a4862e61846ceea5f03b5784c6
-
SHA512
c59905d239d41884ea8ea3ea0debfb60255de92dce723a39111fcf5ca725aeb9737b57ee00117e23e0b6e291db82ca227338e9b65fdf28095eabb8088f0f6911
-
SSDEEP
1536:dC42owFQhOndUNOyTV0X/VbY07JNGQI43h5AAbXFbzZTR5mZ/Q2c3Fc:dFhw9d6TQ/JY0683h5AMXBz9REhQA
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
4df6e56d63029b1a9d0aad761cb34b168fd6d6a4862e61846ceea5f03b5784c6.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE