RunDllHostCallBack
Behavioral task
behavioral1
Sample
b480312742ef150887c3c34bd9f1702922d527c83d907f37db01bbb13d61a846.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b480312742ef150887c3c34bd9f1702922d527c83d907f37db01bbb13d61a846.dll
Resource
win10v2004-20220812-en
General
-
Target
b480312742ef150887c3c34bd9f1702922d527c83d907f37db01bbb13d61a846
-
Size
89KB
-
MD5
fac9ecb8ca29f0fd6ebb08730a55ea44
-
SHA1
f0022bf8c15915fb5241d28cd3831c61a5ab5d32
-
SHA256
b480312742ef150887c3c34bd9f1702922d527c83d907f37db01bbb13d61a846
-
SHA512
bab18e42cd8679e095fdaf947c4d163b3a9d1e7394e69e3f5a0a356b846e4d18736b20090503e5fd6c57f03ae3619e4a0ac36377747b96ee2f66def88c34e751
-
SSDEEP
1536:u4bBoE8MqMUisDm4+RXCaLkj8xZJ0u/2XCY/80RJPJ/RhsS+I80:ZtoWUiscRRjJ//2xPJ5hNp
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b480312742ef150887c3c34bd9f1702922d527c83d907f37db01bbb13d61a846.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE