rundll32
Static task
static1
Behavioral task
behavioral1
Sample
c788a61325831f78902a498b1eef7233723a48d97d745ef0539ce449f5a51d22.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c788a61325831f78902a498b1eef7233723a48d97d745ef0539ce449f5a51d22.dll
Resource
win10v2004-20220901-en
General
-
Target
c788a61325831f78902a498b1eef7233723a48d97d745ef0539ce449f5a51d22
-
Size
7KB
-
MD5
2aab3adeafcd78b1fa4544af22b71d00
-
SHA1
579bd6a4ab18456596cf189a749b60b4565a920c
-
SHA256
c788a61325831f78902a498b1eef7233723a48d97d745ef0539ce449f5a51d22
-
SHA512
714e06a560f2fb11a263b40db6dac9f67d234eab8890874f1988ddbee01cd2562940bc6b4e60c311798a0df9efcb51ff3f455ec4da3fa5768d5cdff47a59f3a7
-
SSDEEP
96:VGEETrMLH5ZNJcafG7cFeyi8ekfpQXINwfdUl7IXpvx7SEW/Ps:efMdJcaugdjliXINAdUZI5hYM
Malware Config
Signatures
Files
-
c788a61325831f78902a498b1eef7233723a48d97d745ef0539ce449f5a51d22.dll windows x86
a23064e36a7cee786955ca6fd65d4af8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryW
ReadFile
CreateFileW
GetProcAddress
VirtualAlloc
MoveFileExW
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 646B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 517B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ