rundll32
Static task
static1
Behavioral task
behavioral1
Sample
ef7bef7c69a060a58b33662444c83ab6bcc8f98acfcc01ad30f8437682564367.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ef7bef7c69a060a58b33662444c83ab6bcc8f98acfcc01ad30f8437682564367.dll
Resource
win10v2004-20221111-en
General
-
Target
ef7bef7c69a060a58b33662444c83ab6bcc8f98acfcc01ad30f8437682564367
-
Size
8KB
-
MD5
8969360facdf34b03fea5c0ca600adf0
-
SHA1
7827d3133fad26957fb6b107e2da7a433d0ba70b
-
SHA256
ef7bef7c69a060a58b33662444c83ab6bcc8f98acfcc01ad30f8437682564367
-
SHA512
ee2fb9df7853c2acadcd429a9661f4019063b1fc436087ede343afd668ee02a6df66f82f5b34d08ea7b4be8037c3d9998c42595e662165daa3eb4f6a3d5a5533
-
SSDEEP
96:z0/gPtJrYmVjGwd+8blPDDDDDDDDEZSbIb1555xXML2XuTNAyb0I:FTiS+siZXJSN
Malware Config
Signatures
Files
-
ef7bef7c69a060a58b33662444c83ab6bcc8f98acfcc01ad30f8437682564367.dll windows x86
01c41bde2e28b577655077042a01522f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 494B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 76B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 138B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ