RunDllHostCallBack
Behavioral task
behavioral1
Sample
97e37f4659fb091b4c903be6fca87b9e308bd0d2016a39dc2e1ef86cbcde1837.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
97e37f4659fb091b4c903be6fca87b9e308bd0d2016a39dc2e1ef86cbcde1837.dll
Resource
win10v2004-20221111-en
General
-
Target
97e37f4659fb091b4c903be6fca87b9e308bd0d2016a39dc2e1ef86cbcde1837
-
Size
91KB
-
MD5
79de40555c73d86d064071ff77cb9113
-
SHA1
00f2365cd4b84f3b9fbcc66e029950afc983967e
-
SHA256
97e37f4659fb091b4c903be6fca87b9e308bd0d2016a39dc2e1ef86cbcde1837
-
SHA512
e717df0fed7f3bc7f22b2eca45bc39acbd462ad16039b1379f8dda5a8050108633ddfbcab4d18235fd3591b9c3dc6eba90356ee923ca0ceb43acd04b22e86f1b
-
SSDEEP
1536:eCBc3OXzYNED3spKGqUSo0n9dDP7u/sALW0Hi56Z3n/t8YPqy88CNCjbnw:dBX86D32tqUSdzPq/suBU6hyQqy8hCvw
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
97e37f4659fb091b4c903be6fca87b9e308bd0d2016a39dc2e1ef86cbcde1837.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE