RunDllHostCallBack
Behavioral task
behavioral1
Sample
f5dc28c34ed5855f08beb7bd3a1b7bea18ad489afc2f469dcab2174596f10f95.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f5dc28c34ed5855f08beb7bd3a1b7bea18ad489afc2f469dcab2174596f10f95.dll
Resource
win10v2004-20220812-en
General
-
Target
f5dc28c34ed5855f08beb7bd3a1b7bea18ad489afc2f469dcab2174596f10f95
-
Size
101KB
-
MD5
1f31170b5f0d89bb121c130f3e770b05
-
SHA1
9c5e840c4e0e6a75861005e2bd3a000f37de5cde
-
SHA256
f5dc28c34ed5855f08beb7bd3a1b7bea18ad489afc2f469dcab2174596f10f95
-
SHA512
19fc7a621f91a4825a1a2333ce8e39908e8c917fd18a858a663d9e3bdf35ef683ee643d555bcfc4ee62cfb6bb8f1e580ae89fd71a173d94fba727e0ae9de8e71
-
SSDEEP
1536:dC42owFQhOndUNOyTV0X+mdXKuSPsoDQKeyjWxH2diNa+Z0Rijy2ks:dFhw9d6TQ3N6zDhep12dJG0Rij1l
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f5dc28c34ed5855f08beb7bd3a1b7bea18ad489afc2f469dcab2174596f10f95.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE