RunDllHostCallBack
Behavioral task
behavioral1
Sample
85b11ddf8ea2145dbb82622f1380ce7f5da1f06981762e3cec508ddc5b6dd2aa.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
85b11ddf8ea2145dbb82622f1380ce7f5da1f06981762e3cec508ddc5b6dd2aa.dll
Resource
win10v2004-20220812-en
General
-
Target
85b11ddf8ea2145dbb82622f1380ce7f5da1f06981762e3cec508ddc5b6dd2aa
-
Size
84KB
-
MD5
6186d8f2bf4895cde1b30c0daa8b86f2
-
SHA1
2d84a813b870a55d37e0383b1b0e0e42b8c0a901
-
SHA256
85b11ddf8ea2145dbb82622f1380ce7f5da1f06981762e3cec508ddc5b6dd2aa
-
SHA512
2f08244f2bbbae1f1859cbd4aca81cf1c1fe9162f69d34000d552a0495fc8970023e4dfab0ed2eb74f3dfe75c6486bbfa3225200074dce07ca138b6ab207a52f
-
SSDEEP
1536:dC42owFQhOndUNOyTV0XC9nt9IDpiZjEVhOpvug29wv:dFhw9d6TQC9oDyEapvugyO
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
85b11ddf8ea2145dbb82622f1380ce7f5da1f06981762e3cec508ddc5b6dd2aa.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE