rundll32
Static task
static1
Behavioral task
behavioral1
Sample
1c7644a170083e349cb647d2409133112f1c24ac9d522676a5dfd307c7d5606d.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
1c7644a170083e349cb647d2409133112f1c24ac9d522676a5dfd307c7d5606d.dll
Resource
win10v2004-20221111-en
General
-
Target
1c7644a170083e349cb647d2409133112f1c24ac9d522676a5dfd307c7d5606d
-
Size
5KB
-
MD5
904789683356f11307ad248bd871f030
-
SHA1
a185b128aa9bb726a6a49b46bd7a8936ba5029f3
-
SHA256
1c7644a170083e349cb647d2409133112f1c24ac9d522676a5dfd307c7d5606d
-
SHA512
de3dfc3fa7cbc09ed84e5f78abe4ded98e6446763562f756b9aa699389db5927bc7d0def6157bc8e3098e27cd73b307b11db40639fb369b6af3cec7650f52b9b
-
SSDEEP
96:nEY2RrF1eqwi4zfk8HxF53dF5qF+pQ+hhzg:EHRh1eppIM5NY+C
Malware Config
Signatures
Files
-
1c7644a170083e349cb647d2409133112f1c24ac9d522676a5dfd307c7d5606d.dll windows x86
76812f441b0ed9d3cc0748af25d689a3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
CreateFileW
GetProcAddress
VirtualAlloc
LoadLibraryW
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 512B - Virtual size: 510B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 423B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 584B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ