rundll32
Static task
static1
Behavioral task
behavioral1
Sample
d29cec8affabab0b652d50701ddb2790cc4fa105ecf1527f79f72ec1ee16b350.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d29cec8affabab0b652d50701ddb2790cc4fa105ecf1527f79f72ec1ee16b350.dll
Resource
win10v2004-20221111-en
General
-
Target
d29cec8affabab0b652d50701ddb2790cc4fa105ecf1527f79f72ec1ee16b350
-
Size
8KB
-
MD5
eed0a576f1eaf31a1b82f8c6c1601180
-
SHA1
5d0333c8ecc422a8f5e0d8badc623b813174fc82
-
SHA256
d29cec8affabab0b652d50701ddb2790cc4fa105ecf1527f79f72ec1ee16b350
-
SHA512
e000af1a642a4534582c17472716fe689f8a213f3cf919c8cab7a1efd5f6c08a23c9a459c2b623faf17fa45d352d1ad18114d880a8b390ff0e81aa37ce2b433e
-
SSDEEP
192:F746TMz9BGF/YFAWcl3fZNJAdZyobd14oP:FVTi9S/Y5cPceo
Malware Config
Signatures
Files
-
d29cec8affabab0b652d50701ddb2790cc4fa105ecf1527f79f72ec1ee16b350.dll windows x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Exports
Exports
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 258B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 82B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ