RunDllHostCallBack
Behavioral task
behavioral1
Sample
7b8f14d31eebfa9556ad34df922980d97e11e6a17e77862ea86c4806dc48a828.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7b8f14d31eebfa9556ad34df922980d97e11e6a17e77862ea86c4806dc48a828.dll
Resource
win10v2004-20220812-en
General
-
Target
7b8f14d31eebfa9556ad34df922980d97e11e6a17e77862ea86c4806dc48a828
-
Size
102KB
-
MD5
5a159654bec6b6bf1e8895250eb34a03
-
SHA1
fca157c3cb62adb85728af207d11f52de537653c
-
SHA256
7b8f14d31eebfa9556ad34df922980d97e11e6a17e77862ea86c4806dc48a828
-
SHA512
fdc2b0b7a1a9c67e6beb271da95c22f8ebe090eda26991f9ce162f531baa5eef6238541229b56338e93ac1d5dc76747690f128fce94ae1173a42d521375401a6
-
SSDEEP
1536:VhAln6fjYuvecomMY9pfjJ2TGndL9sIgHlSh0Z3rXuLC0j2MS5Ab7O:O6fVvrvL3froRzIKMiwy
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
7b8f14d31eebfa9556ad34df922980d97e11e6a17e77862ea86c4806dc48a828.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE