rundll32
Static task
static1
Behavioral task
behavioral1
Sample
b81def52ca42f03eac29aa175d01b7db46985430612e0a4c2982472cecc0f542.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b81def52ca42f03eac29aa175d01b7db46985430612e0a4c2982472cecc0f542.dll
Resource
win10v2004-20221111-en
General
-
Target
b81def52ca42f03eac29aa175d01b7db46985430612e0a4c2982472cecc0f542
-
Size
5KB
-
MD5
1a87396be0911829fb572061342932d0
-
SHA1
1f1193a8e53d9ffdcce0ced30f9991939290dd41
-
SHA256
b81def52ca42f03eac29aa175d01b7db46985430612e0a4c2982472cecc0f542
-
SHA512
5662a4ba4ec8247eb3d7807e1a88e25ce2e4ed7b90d880b384aca53d1e537bf9557bd068dadba4c13084869f38df0e7285aeabf2d00b3003879fd48a026ec4b9
-
SSDEEP
48:C6Vo9HBok7lYa92RranDBetlG9MgByXM28o4+W7C9iUbheoC:nI2RrUeqvUMDo4+W7C9i0heoC
Malware Config
Signatures
Files
-
b81def52ca42f03eac29aa175d01b7db46985430612e0a4c2982472cecc0f542.dll windows x86
76812f441b0ed9d3cc0748af25d689a3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
CreateFileW
GetProcAddress
VirtualAlloc
LoadLibraryW
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 512B - Virtual size: 510B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 584B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 126B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ