RunDllHostCallBack
Static task
static1
Behavioral task
behavioral1
Sample
109f1706168d6239a4e75e5584cfb5ea41c27c7f1b44ec4c9b76ff95a00e2504.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
109f1706168d6239a4e75e5584cfb5ea41c27c7f1b44ec4c9b76ff95a00e2504.dll
Resource
win10v2004-20231020-en
General
-
Target
109f1706168d6239a4e75e5584cfb5ea41c27c7f1b44ec4c9b76ff95a00e2504
-
Size
2.1MB
-
MD5
f3f53e03c6dc3871d73b86432b551912
-
SHA1
f5c6e81883b6c29a9ce9f4260727bd5e32bf010f
-
SHA256
109f1706168d6239a4e75e5584cfb5ea41c27c7f1b44ec4c9b76ff95a00e2504
-
SHA512
a55884671c8b2c38bb13d9e011a102e988fa31c215f1f062d8c041f6243a1cda5f625802f903c8f837a530bc264724ef0a2e25640e2db48f0e8dc97cdc23af68
-
SSDEEP
24576:mubBVx1HPR/xGFXsoA4NNYEShqw5sb80kYXWZpN/uqwqh5Lqab4HMH6hT0WNT/:mqbFxGF8CczswXvTN/JwyNNzHgT/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 109f1706168d6239a4e75e5584cfb5ea41c27c7f1b44ec4c9b76ff95a00e2504
Files
-
109f1706168d6239a4e75e5584cfb5ea41c27c7f1b44ec4c9b76ff95a00e2504.dll windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 4KB - Virtual size: 856KB
IMAGE_SCN_MEM_READ
VProtect Size: 616KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 1.4MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 8KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ