rundll32
Static task
static1
Behavioral task
behavioral1
Sample
cd3bab6acc27b67de28b34864f39833929ebf5e19763123eafa230bff86e65e8.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cd3bab6acc27b67de28b34864f39833929ebf5e19763123eafa230bff86e65e8.dll
Resource
win10v2004-20220812-en
General
-
Target
cd3bab6acc27b67de28b34864f39833929ebf5e19763123eafa230bff86e65e8
-
Size
6KB
-
MD5
6c8027a408e66f1d79e216fa8f9daf68
-
SHA1
60978e45dd71c46dcdc2669277273b5d88494ddf
-
SHA256
cd3bab6acc27b67de28b34864f39833929ebf5e19763123eafa230bff86e65e8
-
SHA512
876147718ec08c65a1d87bb8a0c24893d4b3a7017722e9ba39d3ad96787eefb07da87eb4a2bc22ff9e2a66b52a07bc20e51c699854fc3fd75847390c1f9ad803
-
SSDEEP
48:SsGp63gAST0cMLlD7prUlG9NzgPKcLNIxS:VGEETrMLH5QKcLNIxS
Malware Config
Signatures
Files
-
cd3bab6acc27b67de28b34864f39833929ebf5e19763123eafa230bff86e65e8.dll windows x86
a23064e36a7cee786955ca6fd65d4af8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryW
ReadFile
CreateFileW
GetProcAddress
VirtualAlloc
MoveFileExW
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 646B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 517B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ