rundll32
Static task
static1
Behavioral task
behavioral1
Sample
b0f1f6ee04e9375b9c4fd8e13611ee1afbf830c79f291cd381ac9e37244df41a.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b0f1f6ee04e9375b9c4fd8e13611ee1afbf830c79f291cd381ac9e37244df41a.dll
Resource
win10v2004-20221111-en
General
-
Target
b0f1f6ee04e9375b9c4fd8e13611ee1afbf830c79f291cd381ac9e37244df41a
-
Size
6KB
-
MD5
0fc37ed67bda7b21ef5f342c35adf200
-
SHA1
169c51f70dcc60261548ab144859a23950489a3e
-
SHA256
b0f1f6ee04e9375b9c4fd8e13611ee1afbf830c79f291cd381ac9e37244df41a
-
SHA512
de92513c39ce10f7750337ae61db54a93be2c48dc2996b0aaa97e3a2d11c2f8e0c7dca3b6c902973a4a3767c6aa2f6f89a6711701f31e0832cda9861e9e8cac9
-
SSDEEP
192:unSR6bgYRjRbSXC3+EkJV8b/1k0GNuZx4hxmpX9W:uZR
Malware Config
Signatures
Files
-
b0f1f6ee04e9375b9c4fd8e13611ee1afbf830c79f291cd381ac9e37244df41a.dll windows x86
33eb74cdd77dab1b168bbaa130115a9d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
CreateFileW
GetProcAddress
LoadLibraryW
user32
PostMessageW
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 503B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ