rundll32
Static task
static1
Behavioral task
behavioral1
Sample
f80fb664b4379eaf200bda4a35e43411c55006eb0890a53cc51c7e812a411787.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f80fb664b4379eaf200bda4a35e43411c55006eb0890a53cc51c7e812a411787.dll
Resource
win10v2004-20220812-en
General
-
Target
f80fb664b4379eaf200bda4a35e43411c55006eb0890a53cc51c7e812a411787
-
Size
6KB
-
MD5
446c86c07d253e7704757464e234589f
-
SHA1
6e097f4fc57b50b12ac3242c9955c56d8d852cba
-
SHA256
f80fb664b4379eaf200bda4a35e43411c55006eb0890a53cc51c7e812a411787
-
SHA512
e86916faf873893ada791bc5cd7ae41e37f23ee1d36cf473d80bd85291fc429a3be8a116a546d3319e329a9099a48f35b63516bf9709e84f8aab2f68d332c367
-
SSDEEP
96:nI2RrUeqPmX48vmdRQKJLpXHeJ99dA2ehrGGrathRqhxeKJr:XR4eWmX4umdRN+J99eIGr+hRxK
Malware Config
Signatures
Files
-
f80fb664b4379eaf200bda4a35e43411c55006eb0890a53cc51c7e812a411787.dll windows x86
76812f441b0ed9d3cc0748af25d689a3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
CreateFileW
GetProcAddress
VirtualAlloc
LoadLibraryW
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 512B - Virtual size: 510B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 584B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 126B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ