RunDllHostCallBack
Behavioral task
behavioral1
Sample
7d61ae34f37a3ad8ce747f06e71b8a3f6a30434a1d8942df891ae78fcfb59563.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7d61ae34f37a3ad8ce747f06e71b8a3f6a30434a1d8942df891ae78fcfb59563.dll
Resource
win10v2004-20220812-en
General
-
Target
7d61ae34f37a3ad8ce747f06e71b8a3f6a30434a1d8942df891ae78fcfb59563
-
Size
98KB
-
MD5
8073716b2dc8346f69d980439dba65e0
-
SHA1
3c9209276f42a812a794bc8661b816cb141c5727
-
SHA256
7d61ae34f37a3ad8ce747f06e71b8a3f6a30434a1d8942df891ae78fcfb59563
-
SHA512
bcd183cf5624dface487516eacdb47098b828a6602db6c0abf66b3f06cc188586d1e7ee1d77a9931b4981521618a294ebf29aacf2793869a78c0d9c3bc5f7560
-
SSDEEP
1536:0RZenQ+IFisjvYiLDQzcGJbraI1Zb6LPIUfXnfcgQK//w6vd+V49mnKIfw/:ESQasjvYiL8DBOUClUgQK/PpmnKKw/
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
7d61ae34f37a3ad8ce747f06e71b8a3f6a30434a1d8942df891ae78fcfb59563.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE