RunDllHostCallBack
Behavioral task
behavioral1
Sample
5a4093315fe12c86fd465b8165f408bbebc417fda9e0421ce07f85f92547db7c.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5a4093315fe12c86fd465b8165f408bbebc417fda9e0421ce07f85f92547db7c.dll
Resource
win10v2004-20220812-en
General
-
Target
5a4093315fe12c86fd465b8165f408bbebc417fda9e0421ce07f85f92547db7c
-
Size
101KB
-
MD5
a33cb5d3fb93a98a62cbf7f6c600cde0
-
SHA1
ca046b68669c9db85dc1994b4e383d106515aa31
-
SHA256
5a4093315fe12c86fd465b8165f408bbebc417fda9e0421ce07f85f92547db7c
-
SHA512
b38a685801303da3a40616ac6a4a01348a7b1a4b800ef6ed52624674530831af4b77b391e9d741b926746ed24e7a4149936aa97ea520f7e716e06c4b179c7e70
-
SSDEEP
1536:VhAln6fjYuvecXxiu7+k+Ci8z+/CI87+/bjR3t4WepWf:O6fVvrXku7+k+CiM+/C97+F290f
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
5a4093315fe12c86fd465b8165f408bbebc417fda9e0421ce07f85f92547db7c.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE