RunDllHostCallBack
Behavioral task
behavioral1
Sample
74ea633ef304fee79625b1e2b82297f14776c72633266e6ec6ca3bba9ad08ff8.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
74ea633ef304fee79625b1e2b82297f14776c72633266e6ec6ca3bba9ad08ff8.dll
Resource
win10v2004-20220812-en
General
-
Target
74ea633ef304fee79625b1e2b82297f14776c72633266e6ec6ca3bba9ad08ff8
-
Size
102KB
-
MD5
3c4361ae975103049135d9544d41ea53
-
SHA1
20915a693ca2389311bf0407b578244be6a6ac9f
-
SHA256
74ea633ef304fee79625b1e2b82297f14776c72633266e6ec6ca3bba9ad08ff8
-
SHA512
cce8d3db6d5999e225e3ae2f4640e78ced41a6015b51d6202a8505dc33d3303af8786c4e3b69e4c186e6db8c6dae2a7df80652116216b83ca894bf5705f8d041
-
SSDEEP
1536:dC42owFQhOndUNOyTV0XUH9bn2q7h+I+xTNORdLpxA4se0Z4hIZV:dFhw9d6TQUdbD7h+XxTwjsvZ4oV
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
74ea633ef304fee79625b1e2b82297f14776c72633266e6ec6ca3bba9ad08ff8.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE