RunDllHostCallBack
Behavioral task
behavioral1
Sample
d96b7d3e5b78844e4d63381ea64def1517f470ef7716df9586e75fdf6a58c20d.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d96b7d3e5b78844e4d63381ea64def1517f470ef7716df9586e75fdf6a58c20d.dll
Resource
win10v2004-20220812-en
General
-
Target
d96b7d3e5b78844e4d63381ea64def1517f470ef7716df9586e75fdf6a58c20d
-
Size
79KB
-
MD5
c43f173ba50158d0bc716cc7900c9bd6
-
SHA1
8036c683f7bd937447cf9e72d94abeb5bceb9cb4
-
SHA256
d96b7d3e5b78844e4d63381ea64def1517f470ef7716df9586e75fdf6a58c20d
-
SHA512
2b433b5a71ad62de441aecc6a57f80b1bbd6fa326f0f7eeebafcb402657468e7696adfd8c32343d3db5fa23a81b40a7d8c3ad404676073f1ef4f81d059ef4419
-
SSDEEP
768:VhAR0QxZn6x2fa3YCYaEeZhJ6W8nciSljIQl/hmeAZL7ScXN7Xp72hJxqm8E5S1p:VhAln6fjYuvec/GQUZSAXp72hJxqm/5o
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
d96b7d3e5b78844e4d63381ea64def1517f470ef7716df9586e75fdf6a58c20d.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE