RunDllHostCallBack
Behavioral task
behavioral1
Sample
258ac26323003d211ab667f30648348a177cc91ef28db5d1a1a4b70552faef39.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
258ac26323003d211ab667f30648348a177cc91ef28db5d1a1a4b70552faef39.dll
Resource
win10v2004-20220812-en
General
-
Target
258ac26323003d211ab667f30648348a177cc91ef28db5d1a1a4b70552faef39
-
Size
111KB
-
MD5
f97fb70b1e7ce3f6734240140b65827d
-
SHA1
81b1fa6de1501a898e7053bb49be73a9c093177e
-
SHA256
258ac26323003d211ab667f30648348a177cc91ef28db5d1a1a4b70552faef39
-
SHA512
f28923836640672ea5211dd3eeed6694c0f24c0d3056da8ee86991544755fae65870c4dfcf30b625c83cf6f4ced3265eb842625b7b696039cd7847e192e4d077
-
SSDEEP
1536:nQBkMh4tIVhUGW+IWyXQVa8TNRR6J4k4n+g9a2VC/ie43FC+KsxRXPQc0v7Yvnqf:viU2hUGoLgA4Bc2VC/iecWkBPQc5vne
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
258ac26323003d211ab667f30648348a177cc91ef28db5d1a1a4b70552faef39.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE