rundll32
Static task
static1
Behavioral task
behavioral1
Sample
501f0c561ad4342025e103083e8269785e635e13543904f7e5ee56f85c5678a9.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
501f0c561ad4342025e103083e8269785e635e13543904f7e5ee56f85c5678a9.dll
Resource
win10v2004-20221111-en
General
-
Target
501f0c561ad4342025e103083e8269785e635e13543904f7e5ee56f85c5678a9
-
Size
5KB
-
MD5
efbba1840c16260d7122410fec9cd9e0
-
SHA1
5ff35850c5dad7af4ad4891db0b472062e5c7898
-
SHA256
501f0c561ad4342025e103083e8269785e635e13543904f7e5ee56f85c5678a9
-
SHA512
1ba391d99b3c29d2b0e490fbdceb529ae03c1696cb383ddc9350f7dedbeaf82ed98e326031c51c6233d61ce68f1ffcb6e262eb17d60c23bf7b0e84973364bb88
-
SSDEEP
96:XprYDpKnI6wJ+Ls7guyHejyn/I9l0iai1UblU:XUcA+ggd+W/If0iIU
Malware Config
Signatures
Files
-
501f0c561ad4342025e103083e8269785e635e13543904f7e5ee56f85c5678a9.dll windows x86
acd1d84bd0e367458dab18494623671b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
user32
GetWindowLongW
Exports
Exports
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 360B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 86B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ