RunDllHostCallBack
Behavioral task
behavioral1
Sample
cf3335601d42303c431c7f47a5da06d31a2558b47252d1fb0944045c54b48e55.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cf3335601d42303c431c7f47a5da06d31a2558b47252d1fb0944045c54b48e55.dll
Resource
win10v2004-20220812-en
General
-
Target
cf3335601d42303c431c7f47a5da06d31a2558b47252d1fb0944045c54b48e55
-
Size
93KB
-
MD5
3725e5fc35a48b706a71a43ea3f38c30
-
SHA1
94e5d7a4505635fb6befe7168bcc21063e85f5cb
-
SHA256
cf3335601d42303c431c7f47a5da06d31a2558b47252d1fb0944045c54b48e55
-
SHA512
3afb9f277c80ee92849dd0a48c968f9e0d35612a13ecc32f409e911cea0fd6b5805905bc48d2a70d821d867d6e1f832ed02b06b78ad41abdb960267eaea30f13
-
SSDEEP
1536:niIK23G0LL0q9yiJzDrCTMD4yNf7LeMuKwsfLT5GyXWFfs4iwPCWaVNQP:nnt20nn9VmTMD4yNhu/sfLdaCWRP
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
cf3335601d42303c431c7f47a5da06d31a2558b47252d1fb0944045c54b48e55.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE