rundll32
Static task
static1
Behavioral task
behavioral1
Sample
bb8256cfd3740c47aa80605f13738b3d4295da1b289fe224ad7bf0485a21fec0.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
bb8256cfd3740c47aa80605f13738b3d4295da1b289fe224ad7bf0485a21fec0.dll
Resource
win10v2004-20220812-en
General
-
Target
bb8256cfd3740c47aa80605f13738b3d4295da1b289fe224ad7bf0485a21fec0
-
Size
5KB
-
MD5
ee2c36301984f0f1f249ffb61cdc32e0
-
SHA1
fbef77cd8e7a8272446127b4cc0ccb3a9137dc4c
-
SHA256
bb8256cfd3740c47aa80605f13738b3d4295da1b289fe224ad7bf0485a21fec0
-
SHA512
fb7d2e8aa753f48c69910b46c690935cf18e5b288b5565a76cbef947165e7581c1549e6c6132d9112ed5dd18c3cdcfacb7507ab4d1ea4aaa361cb7f1ff09ba16
-
SSDEEP
96:nI2RrUeqjAWS64ZS6jS6KbK6jl6666V6R/4:XR4ed
Malware Config
Signatures
Files
-
bb8256cfd3740c47aa80605f13738b3d4295da1b289fe224ad7bf0485a21fec0.dll windows x86
76812f441b0ed9d3cc0748af25d689a3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
CreateFileW
GetProcAddress
VirtualAlloc
LoadLibraryW
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 512B - Virtual size: 510B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 584B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 126B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ