RunDllHostCallBack
Behavioral task
behavioral1
Sample
96e92ad2328a361572518cf6720b3d846d1d41859af14df5b9ed91853e1f88e0.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
96e92ad2328a361572518cf6720b3d846d1d41859af14df5b9ed91853e1f88e0.dll
Resource
win10v2004-20220812-en
General
-
Target
96e92ad2328a361572518cf6720b3d846d1d41859af14df5b9ed91853e1f88e0
-
Size
948KB
-
MD5
a137479c53e9ae4c1e163e489a04c2b0
-
SHA1
08bfe5b99039fa6bade00fbe7b440c69f21e44da
-
SHA256
96e92ad2328a361572518cf6720b3d846d1d41859af14df5b9ed91853e1f88e0
-
SHA512
f559adfa782664f825a221753ecc621445577d50809cc79b267e753874f5311f818c43775badf76fc7e8bf318eb7710778e7bff1e3f7f60e9a364510f14be13c
-
SSDEEP
6144:F43EpZ45cmXO5PFerB2voMOZRa2kMMFv3aYKhce6qKcZaY4tpKwKBObdNdGEDvz:FMEpDFSB2vo3RDM9tPqNapbblvz4q
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
96e92ad2328a361572518cf6720b3d846d1d41859af14df5b9ed91853e1f88e0.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: 648KB - Virtual size: 648KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 264KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE