rundll32
Static task
static1
Behavioral task
behavioral1
Sample
f5929602f6579cfdd32d528501fea805b3570b2601467982d756377e358becc3.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f5929602f6579cfdd32d528501fea805b3570b2601467982d756377e358becc3.dll
Resource
win10v2004-20220812-en
General
-
Target
f5929602f6579cfdd32d528501fea805b3570b2601467982d756377e358becc3
-
Size
6KB
-
MD5
a063461ffbde1ffb6b70e493895f1480
-
SHA1
df28bb3488132f5b8c7fb0e22173a41d07947788
-
SHA256
f5929602f6579cfdd32d528501fea805b3570b2601467982d756377e358becc3
-
SHA512
67149019225d5765bc81beb26b6103f2fbdef54163f6571c05c251739f0e50eeb0a762f95b14416b198df2d831d974f3dc6d1e97b97dddcb486f8fd1d5c9e753
-
SSDEEP
96:Ts1Wnnnynnnnnnnn6nnann7nnXnnbnnKniROmH0gG+W44hM1KHvHV+A7Z:YXr0g3W4UM16HVl
Malware Config
Signatures
Files
-
f5929602f6579cfdd32d528501fea805b3570b2601467982d756377e358becc3.dll windows x86
9afefbdd5421ff1ca011cede13cefa28
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
GetProcAddress
LoadLibraryW
user32
SendMessageW
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 455B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 146B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ