RunDllHostCallBack
Behavioral task
behavioral1
Sample
b206a06a20c9ef23f105b06f822293b00106c1a30705a9a56bd8e262a7b6ed14.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b206a06a20c9ef23f105b06f822293b00106c1a30705a9a56bd8e262a7b6ed14.dll
Resource
win10v2004-20220812-en
General
-
Target
b206a06a20c9ef23f105b06f822293b00106c1a30705a9a56bd8e262a7b6ed14
-
Size
105KB
-
MD5
e934d44593377029ac9af2ba66dcb339
-
SHA1
06c87f2409aef935f74b9d9cdc4b37b96b6157eb
-
SHA256
b206a06a20c9ef23f105b06f822293b00106c1a30705a9a56bd8e262a7b6ed14
-
SHA512
c41ad7c6b6a3dc5c45485a0a170b7dcccbc85d44198fa37d67aeddb16f0c375830f86c433e4c5fdc7b8adabed9e489dbb25472a6b422ed18aa6f646aeabd2959
-
SSDEEP
3072:mfjJPm21eD9eyPc6RXS0IG7VPP06qIbMS:mdm21eD9eyPc6xSgxn0LIbMS
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b206a06a20c9ef23f105b06f822293b00106c1a30705a9a56bd8e262a7b6ed14.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE