rundll32
Static task
static1
Behavioral task
behavioral1
Sample
5b12f28ab05007d1573615c085f3f4d0322074b69c81d7fc8616441597c9f460.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5b12f28ab05007d1573615c085f3f4d0322074b69c81d7fc8616441597c9f460.dll
Resource
win10v2004-20221111-en
General
-
Target
5b12f28ab05007d1573615c085f3f4d0322074b69c81d7fc8616441597c9f460
-
Size
8KB
-
MD5
fc0a6ab2ddadfe2b5b03e6812eb32890
-
SHA1
ef217e574acd799b5c758b04148e3d679ae266e7
-
SHA256
5b12f28ab05007d1573615c085f3f4d0322074b69c81d7fc8616441597c9f460
-
SHA512
7fbd4a3544de98d49ce86a05ddb8dbf4d019410a6d7c2978c613b9b81f29de1fd91b488c3568fb278feae0cdeb1f6ce98a51d552615eb82495574dd6736118f1
-
SSDEEP
192:XR4eqGSNmMdVtMZI5fg4As5qw+xRy3/8KELdEJ9u:XRQGSNj3+dg9u
Malware Config
Signatures
Files
-
5b12f28ab05007d1573615c085f3f4d0322074b69c81d7fc8616441597c9f460.dll windows x86
76812f441b0ed9d3cc0748af25d689a3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
CreateFileW
GetProcAddress
VirtualAlloc
LoadLibraryW
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 512B - Virtual size: 510B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 584B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 126B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ