RunDllHostCallBack
Behavioral task
behavioral1
Sample
cdc37839fb7aad898822c23299f6ef260d25049b1fb68dc2c086df65b87cee0c.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cdc37839fb7aad898822c23299f6ef260d25049b1fb68dc2c086df65b87cee0c.dll
Resource
win10v2004-20221111-en
General
-
Target
cdc37839fb7aad898822c23299f6ef260d25049b1fb68dc2c086df65b87cee0c
-
Size
98KB
-
MD5
2ee584433e30471f4c22950cb086a671
-
SHA1
41b7fd409cc7ef53773b8ef332e7966b0d9032d3
-
SHA256
cdc37839fb7aad898822c23299f6ef260d25049b1fb68dc2c086df65b87cee0c
-
SHA512
50076ed512959a758c133069f59bab1ef6535da29e7a9463fa333e59f7d3e56685bde75558394b0032ec32e55b25d68e5e58bbc2d39952a56ecec213af54de4d
-
SSDEEP
3072:R6sVz+kJdbIe1sssg42QZEqivZ+KTMuIgc39fqrVq:E3kJdbIe1sdgQZavZ+pzgcSq
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
cdc37839fb7aad898822c23299f6ef260d25049b1fb68dc2c086df65b87cee0c.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE