rundll32
Static task
static1
Behavioral task
behavioral1
Sample
6cbe84d302f640617408a6a0f4694c3f637c9f6456b7715c5af471967eeca443.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6cbe84d302f640617408a6a0f4694c3f637c9f6456b7715c5af471967eeca443.dll
Resource
win10v2004-20220812-en
General
-
Target
6cbe84d302f640617408a6a0f4694c3f637c9f6456b7715c5af471967eeca443
-
Size
6KB
-
MD5
5511970d8d7c34a1c46d86eecfb8d8b0
-
SHA1
e08aa635cbb9db736747ce86b3f2ee53c1b5e5e2
-
SHA256
6cbe84d302f640617408a6a0f4694c3f637c9f6456b7715c5af471967eeca443
-
SHA512
960b0df154654576062d3a7b461b854972a2c36f85cb712db23154a05a83a468b4fa877ed026b25f44a56d08a6bd3e07e15b61beff7ea0a7daefb67b44ddb872
-
SSDEEP
192:XR4eT2Sfr5NJs8dsdiokG8Q52wHPajDnNK92Mtgn76zzSl/Mc:XR92Sfr5NJs8dsdiokG8+2wHPajDnNKV
Malware Config
Signatures
Files
-
6cbe84d302f640617408a6a0f4694c3f637c9f6456b7715c5af471967eeca443.dll windows x86
76812f441b0ed9d3cc0748af25d689a3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
CreateFileW
GetProcAddress
VirtualAlloc
LoadLibraryW
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 512B - Virtual size: 510B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 584B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 126B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ