RunDllHostCallBack
Behavioral task
behavioral1
Sample
999b995cc0aea29d95245fb5801d2c2d.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
999b995cc0aea29d95245fb5801d2c2d.dll
Resource
win10v2004-20231215-en
General
-
Target
999b995cc0aea29d95245fb5801d2c2d
-
Size
103KB
-
MD5
999b995cc0aea29d95245fb5801d2c2d
-
SHA1
fda0228884dbd2814dacc3ab39fd2cb27973eeaa
-
SHA256
19fa20868984ef3a322e8cd882821ef5d250747ac492155e6a1eff83731b8308
-
SHA512
d3e66ec61943ec73ce7f9f0905be102fd4d19ff31745ef4352cbed288eaecf2a966fe8deda7637a3129c5cc9ed98c9b173b0593e03fbadf44736140b17ac6b42
-
SSDEEP
1536:mfjJPQ9k7lyMeDh7UHR9dknvCQmGxSbb9e+XGjKM3xB0E6I:mfjJPm21eD9eSvCQmFFeePM3xBxZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 999b995cc0aea29d95245fb5801d2c2d
Files
-
999b995cc0aea29d95245fb5801d2c2d.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE