rundll32
Static task
static1
Behavioral task
behavioral1
Sample
f3009b20d096837920ed270c320ed89b7d0f3057100c88c75450dc80e855ccfc.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f3009b20d096837920ed270c320ed89b7d0f3057100c88c75450dc80e855ccfc.dll
Resource
win10v2004-20220812-en
General
-
Target
f3009b20d096837920ed270c320ed89b7d0f3057100c88c75450dc80e855ccfc
-
Size
6KB
-
MD5
954c5435d05bd69fce4aab1316153fa0
-
SHA1
7afb777bafdf036ca4b8112db75b39bf4a1256f6
-
SHA256
f3009b20d096837920ed270c320ed89b7d0f3057100c88c75450dc80e855ccfc
-
SHA512
14477393234f0a3f88e6ebe735270bc37b3ea29ca308eef8502fc1f94f480efb1f2d7d601ad842d96d0a644c72c45ab4b3fe436e6a6a2c2d05bee2a9231cd2ec
-
SSDEEP
96:WLRxkjujtjd8jPjcZG2Uoy5c0f7ZYaqIOopo4iNZlq:WtqKR6bgYIKc0FY+Oopo4iflq
Malware Config
Signatures
Files
-
f3009b20d096837920ed270c320ed89b7d0f3057100c88c75450dc80e855ccfc.dll windows x86
0e851aab9309cf15af44aad3eee1f0af
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
CreateFileW
GetProcAddress
LoadLibraryW
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ