rundll32
Static task
static1
Behavioral task
behavioral1
Sample
fddbf71a412c9099814b22a1b55507bd85dcefaa06aa2de7ba8aeb45afef8dc5.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fddbf71a412c9099814b22a1b55507bd85dcefaa06aa2de7ba8aeb45afef8dc5.dll
Resource
win10v2004-20221111-en
General
-
Target
fddbf71a412c9099814b22a1b55507bd85dcefaa06aa2de7ba8aeb45afef8dc5
-
Size
6KB
-
MD5
3a7b289584ddd72aab6803cfd1638f70
-
SHA1
6b6e08e48d9839dd81a0ac2b7c7fac908306a36d
-
SHA256
fddbf71a412c9099814b22a1b55507bd85dcefaa06aa2de7ba8aeb45afef8dc5
-
SHA512
9cf03430fafdd62177c666ada5dbca5c2733635b6e7fec78506d5a85fd54c75b97107e636e941982e49f289efebd23bfac4930e415aa4fef6d2d0136f721b967
-
SSDEEP
96:nI2RrUeqV5eoH7S3IH8llDVW13jx1IYZn0g:XR4eAEIS48/ZW1Tgg
Malware Config
Signatures
Files
-
fddbf71a412c9099814b22a1b55507bd85dcefaa06aa2de7ba8aeb45afef8dc5.dll windows x86
76812f441b0ed9d3cc0748af25d689a3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
CreateFileW
GetProcAddress
VirtualAlloc
LoadLibraryW
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 512B - Virtual size: 510B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 584B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 126B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ