rundll32
Static task
static1
Behavioral task
behavioral1
Sample
c3bf618023e0ccba44c2439bae37106473669382d6275c7da9230fc5058652af.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c3bf618023e0ccba44c2439bae37106473669382d6275c7da9230fc5058652af.dll
Resource
win10v2004-20221111-en
General
-
Target
c3bf618023e0ccba44c2439bae37106473669382d6275c7da9230fc5058652af
-
Size
6KB
-
MD5
cb30b7fccf4ad6f5f8adfbbedc99d230
-
SHA1
28e7d9570401318cd6e341b7b1bcbb4248ff7708
-
SHA256
c3bf618023e0ccba44c2439bae37106473669382d6275c7da9230fc5058652af
-
SHA512
7cc7a7447ac4ef7c3af11808c06da6aee7f0a69362cc8718cf70e93993d1dcd9b5b4932c33dd826013dbe41f621570d72d0b8b25b1765818a271c6f546eebee1
-
SSDEEP
96:DixZjmjtjd8jPjcZGR5TIunztUE5o4IG9J78BwvFs/bqAQp7OyA9/i:unSR6bgYNb+mvFs/eAOOyA9
Malware Config
Signatures
Files
-
c3bf618023e0ccba44c2439bae37106473669382d6275c7da9230fc5058652af.dll windows x86
33eb74cdd77dab1b168bbaa130115a9d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
CreateFileW
GetProcAddress
LoadLibraryW
user32
PostMessageW
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 503B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ