rundll32
Static task
static1
Behavioral task
behavioral1
Sample
6a49e04393eecbb9fe21cdca0f0798b4fb49c2a9775fe7fa287f9b4b85da8595.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6a49e04393eecbb9fe21cdca0f0798b4fb49c2a9775fe7fa287f9b4b85da8595.dll
Resource
win10v2004-20221111-en
General
-
Target
6a49e04393eecbb9fe21cdca0f0798b4fb49c2a9775fe7fa287f9b4b85da8595
-
Size
5KB
-
MD5
2fa4a7ba41406bc5e697595b4c6f85c0
-
SHA1
1fa8ae59b4e6c1177d376e25364e82f073826a82
-
SHA256
6a49e04393eecbb9fe21cdca0f0798b4fb49c2a9775fe7fa287f9b4b85da8595
-
SHA512
7ca9270aa60344aa48b8aa6c9971b2d799c84a949f85edbf6cc666580d11b583cb2832f8707a02933a76f176e9c76a963d063fdd6d006d259fcf277c99724888
-
SSDEEP
48:SsGp63gAST0cMLlD7prUlG9NzgljrucUbP1+oTGMzNPqV0ibVTozM1fKryErngbF:VGEETrMLH5X5kl
Malware Config
Signatures
Files
-
6a49e04393eecbb9fe21cdca0f0798b4fb49c2a9775fe7fa287f9b4b85da8595.dll windows x86
a23064e36a7cee786955ca6fd65d4af8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryW
ReadFile
CreateFileW
GetProcAddress
VirtualAlloc
MoveFileExW
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 646B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 517B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ