rundll32
Static task
static1
Behavioral task
behavioral1
Sample
ef18c98ce0db116288ef918a079b13ef5bdc11baa439cd5019d4d24cd0182fb6.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ef18c98ce0db116288ef918a079b13ef5bdc11baa439cd5019d4d24cd0182fb6.dll
Resource
win10v2004-20220812-en
General
-
Target
ef18c98ce0db116288ef918a079b13ef5bdc11baa439cd5019d4d24cd0182fb6
-
Size
6KB
-
MD5
f4ecb15e7775da2bfdfa42a554fc35e0
-
SHA1
627f3d7887a761ce60381ffc53472e547077b481
-
SHA256
ef18c98ce0db116288ef918a079b13ef5bdc11baa439cd5019d4d24cd0182fb6
-
SHA512
5f8561a31d9092b04905fa1d42248877e76ab495cddf6f08163414c2540aff9d59578b8237496933778253cb0d5190a30ac7a0ed718163e2bdbb5f190e835ebc
-
SSDEEP
96:hyZxm/jmjhjvj3jcZGV4e3rk/quhVKIXRxk34MEUSsdanm6uE/o:2M/SdjbgYDYBVKM7MrPsuE/
Malware Config
Signatures
Files
-
ef18c98ce0db116288ef918a079b13ef5bdc11baa439cd5019d4d24cd0182fb6.dll windows x86
75da6d602dafd9b4f3554a4462742a19
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
GetProcAddress
LoadLibraryW
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 421B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 130B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ