rundll32
Static task
static1
Behavioral task
behavioral1
Sample
f2d1394fbc766b2b6a8481e314d82fbf44a031f728f796269b5f6433382666db.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f2d1394fbc766b2b6a8481e314d82fbf44a031f728f796269b5f6433382666db.dll
Resource
win10v2004-20220901-en
General
-
Target
f2d1394fbc766b2b6a8481e314d82fbf44a031f728f796269b5f6433382666db
-
Size
4KB
-
MD5
b3d11d05690ea41ca2de1779f88a4660
-
SHA1
b7314039362a35adb802340124a43e9740b88cd0
-
SHA256
f2d1394fbc766b2b6a8481e314d82fbf44a031f728f796269b5f6433382666db
-
SHA512
71fb1ce6043f4c13c720237adbd9144c34d83103c4afc49e2da727af575a70a15fb5d9792292d1779b3e9bace72d25214f2a2f421b4589d7965cb5f91aef2e12
-
SSDEEP
48:Ss0FkQ23grztJrhWRHnVjG5a4Uh+cxDwsgyc2xR:z0WgPtJrYHVjGwd+SPgOR
Malware Config
Signatures
Files
-
f2d1394fbc766b2b6a8481e314d82fbf44a031f728f796269b5f6433382666db.dll windows x86
01c41bde2e28b577655077042a01522f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 427B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 76B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 138B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ