rundll32
Static task
static1
Behavioral task
behavioral1
Sample
6105613ed5d9ec34b9aee53a1b73541cf34cfd5be89d56c0879445554de2a652.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6105613ed5d9ec34b9aee53a1b73541cf34cfd5be89d56c0879445554de2a652.dll
Resource
win10v2004-20220812-en
General
-
Target
6105613ed5d9ec34b9aee53a1b73541cf34cfd5be89d56c0879445554de2a652
-
Size
6KB
-
MD5
d44bbae5ec1c041fb6d39dd76757a780
-
SHA1
60deaf4ac4b2896a0da7efb06d2ae762c248c5ff
-
SHA256
6105613ed5d9ec34b9aee53a1b73541cf34cfd5be89d56c0879445554de2a652
-
SHA512
8f50b78b6e924cdd985ccd626ca95795eb4bb192ea8ff58d04c201c7543164d61131640136fe98accdc4ad485c0bec13da98891b4c4a2fb1a3e18954c7c5782c
-
SSDEEP
96:Hxvtj+jhjvj3jcZGOiIb21asjifCbmm+9QZVqUQUSDXP:H5t6djbgYRj0sjiabmmKQZFQUSD/
Malware Config
Signatures
Files
-
6105613ed5d9ec34b9aee53a1b73541cf34cfd5be89d56c0879445554de2a652.dll windows x86
e819b2c070effcc973ac007bba8ffedd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
GetProcAddress
LoadLibraryW
user32
PostMessageW
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 485B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 134B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ