rundll32
Static task
static1
Behavioral task
behavioral1
Sample
ff96dd62e9bc50d56ddf40560ab042054bf4f9d50a18d5e6b8bf95655ca34cc7.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ff96dd62e9bc50d56ddf40560ab042054bf4f9d50a18d5e6b8bf95655ca34cc7.dll
Resource
win10v2004-20220901-en
General
-
Target
ff96dd62e9bc50d56ddf40560ab042054bf4f9d50a18d5e6b8bf95655ca34cc7
-
Size
6KB
-
MD5
19307cc52b590220a6ac71e9f8ce1fa0
-
SHA1
0c7154d8f004efe7af40d649e7eab09a5c6ae5be
-
SHA256
ff96dd62e9bc50d56ddf40560ab042054bf4f9d50a18d5e6b8bf95655ca34cc7
-
SHA512
3964a8dbf773bcce42f95890ccfc24f9cff070698afef7bce6abcc50a39e1d2261f3fb255106f891f5ba29d4d3c73e35cc2cb09addc03ab5b6b88bda56d2dd61
-
SSDEEP
96:z0QR9B6BvAwbVO9bP2bJSSo18SSV0MoX/:JR94/bVCGJSxyDo
Malware Config
Signatures
Files
-
ff96dd62e9bc50d56ddf40560ab042054bf4f9d50a18d5e6b8bf95655ca34cc7.dll windows x86
01c41bde2e28b577655077042a01522f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 359B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 146B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ