rundll32
Static task
static1
Behavioral task
behavioral1
Sample
f9faa73de9edc9d0e2f14f735fba63e63b464f9a8c714231d2a0c5f57b0b2587.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f9faa73de9edc9d0e2f14f735fba63e63b464f9a8c714231d2a0c5f57b0b2587.dll
Resource
win10v2004-20221111-en
General
-
Target
f9faa73de9edc9d0e2f14f735fba63e63b464f9a8c714231d2a0c5f57b0b2587
-
Size
5KB
-
MD5
4be898e4e870206e48879f3be05799b0
-
SHA1
8cf2369b2685b61235a38c4d6b39a967734a9fd0
-
SHA256
f9faa73de9edc9d0e2f14f735fba63e63b464f9a8c714231d2a0c5f57b0b2587
-
SHA512
2f6831d9b6b7b9b40050a000d1b6e76cb4d07a9b5dd546b4ff4b182a549862a4af531eb6da34a36d28d35f77b1642f6c0688f5e7c02651788b5b18fce3b720c1
-
SSDEEP
48:a5zJjO9/2uxBAKtklS4OiklShklSK8klS3klSTIZGTviietylAPwIpk03Wvdhffq:Hxvtj+jhjvj3jcZGOiIkf3EWmCzAN
Malware Config
Signatures
Files
-
f9faa73de9edc9d0e2f14f735fba63e63b464f9a8c714231d2a0c5f57b0b2587.dll windows x86
e819b2c070effcc973ac007bba8ffedd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
GetProcAddress
LoadLibraryW
user32
PostMessageW
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 485B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 134B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ