rundll32
Static task
static1
Behavioral task
behavioral1
Sample
89ba6f353a08894bf0110635080d5b47ea44e58eb16280594df0358be5767386.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
89ba6f353a08894bf0110635080d5b47ea44e58eb16280594df0358be5767386.dll
Resource
win10v2004-20220812-en
General
-
Target
89ba6f353a08894bf0110635080d5b47ea44e58eb16280594df0358be5767386
-
Size
6KB
-
MD5
4d952c504d4aa9dcc3943ce53972b4b0
-
SHA1
0f34cfa0beb5b2f2c78d4ba49e8d1b3f43d98251
-
SHA256
89ba6f353a08894bf0110635080d5b47ea44e58eb16280594df0358be5767386
-
SHA512
c836f22e66c17902d17dcd5b1ae62cca0a64dd52007afbb464704e210238b88a37a42bb1795d2ceaf839e6b0b0ac20322e5c140c856ce94e8cca240bb3699826
-
SSDEEP
96:nEY2RrF1eqwi4Din5DbKLY+Sz8W5ySf9wEYqWMTD:EHRh1eppCKLKYWvlw/5
Malware Config
Signatures
Files
-
89ba6f353a08894bf0110635080d5b47ea44e58eb16280594df0358be5767386.dll windows x86
76812f441b0ed9d3cc0748af25d689a3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
CreateFileW
GetProcAddress
VirtualAlloc
LoadLibraryW
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 512B - Virtual size: 510B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 423B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 584B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ