Dropped Files | ZeroBOX
Name 6e908377f3a3d965_gdi32.dll
Submit file
Filepath C:\Users\test22\AppData\Roaming\gdi32.dll
Size 166.0KB
Processes 2556 (87f3f2.exe)
Type PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5 5f12bee4a0ffc9e8d6cf4be6bd624e54
SHA1 bddd0cc23adc8b556abe6aba3323f114f8546e2f
SHA256 6e908377f3a3d96502efa18ea8b6420eea841c58bcd63bd74c6010cec0e72d8d
CRC32 CE9F33B9
ssdeep 3072:b5vVo31vQurcln4uNaSzSyiWJaq1/cyTh7GMbN:bkauMnHNx51kyF7GMbN
Yara
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • Malicious_Packer_Zero - Malicious Packer
  • IsDLL - (no description)
  • IsPE32 - (no description)
  • Generic_Malware_Zero - Generic Malware
  • UPX_Zero - UPX packed file
  • OS_Processor_Check_Zero - OS Processor Check
VirusTotal Search for analysis