rundll32
Static task
static1
Behavioral task
behavioral1
Sample
6813641100468204e3322614bfae84b0496a9827739fee14881975d0214c884c.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6813641100468204e3322614bfae84b0496a9827739fee14881975d0214c884c.dll
Resource
win10v2004-20220812-en
General
-
Target
6813641100468204e3322614bfae84b0496a9827739fee14881975d0214c884c
-
Size
6KB
-
MD5
97a158d8632491945f7a07d3a3df9320
-
SHA1
869b12245d1a073abcf65aa59695ec8d085119bf
-
SHA256
6813641100468204e3322614bfae84b0496a9827739fee14881975d0214c884c
-
SHA512
1a30fbce6a97e1fab2b1d5839b9dea8b16f94501fb9c7d8b0813c0942657138f41950a2c47917962c0404cb08647cadf7f94a5cb6ce4fb9962787f1199c94745
-
SSDEEP
192:unSR6bgYAsov1J+Ugkkkh1lBGxW5L70qtnwQwFUS:uZAVtJ+Ugkk2BGxW535xw7FUS
Malware Config
Signatures
Files
-
6813641100468204e3322614bfae84b0496a9827739fee14881975d0214c884c.dll windows x86
33eb74cdd77dab1b168bbaa130115a9d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
CreateFileW
GetProcAddress
LoadLibraryW
user32
PostMessageW
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 503B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ