RunDllHostCallBack
Behavioral task
behavioral1
Sample
22ff26819b7b48565130671007bf83cb362cafed4a8d98c3962a952727c0663a.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
22ff26819b7b48565130671007bf83cb362cafed4a8d98c3962a952727c0663a.dll
Resource
win10v2004-20220812-en
General
-
Target
22ff26819b7b48565130671007bf83cb362cafed4a8d98c3962a952727c0663a
-
Size
96KB
-
MD5
78fdbd867c0e425c8d86a8c57b4f7610
-
SHA1
7830b2654644f45b5e40fbc1df4f920018b623de
-
SHA256
22ff26819b7b48565130671007bf83cb362cafed4a8d98c3962a952727c0663a
-
SHA512
0a6ad107ecade788764c899c390f607013534847fca99c2a10d77576f976c0ff17c108a67f0bb21d3173c7bf84af13361a1fc7a20ffe53f02f24a1f51a38d66c
-
SSDEEP
1536:DF6sVBxwnCjoV+dbIwZnjvw2jeM8tuL31lWPPjyxnl9sCMpB:R6sVz+kJdbIejvw2jh3zWPPWxjsCu
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
22ff26819b7b48565130671007bf83cb362cafed4a8d98c3962a952727c0663a.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE