rundll32
Static task
static1
Behavioral task
behavioral1
Sample
5956a1866bb71a304567489cc5a8512e826a10aa56b7e4069e19783f8c9d1559.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5956a1866bb71a304567489cc5a8512e826a10aa56b7e4069e19783f8c9d1559.dll
Resource
win10v2004-20220812-en
General
-
Target
5956a1866bb71a304567489cc5a8512e826a10aa56b7e4069e19783f8c9d1559
-
Size
6KB
-
MD5
861aba34f61a063cecd3b7d99a936140
-
SHA1
4c893b48205f773316d47484f295f910292e9a3d
-
SHA256
5956a1866bb71a304567489cc5a8512e826a10aa56b7e4069e19783f8c9d1559
-
SHA512
89eaf1720c1c693cfca6daabe8713b3de63f7f7d53e8875ba10569ac940aa845a85d0150c17642d9dd2bfc4ef56860e8bfc989a165b76967f692327ae0a57041
-
SSDEEP
192:unSR6bgYl5ql9QlFKYHlR/bZxFlqQlNl5tmL6jX:uZzE9KpFRlxFM0Dt66
Malware Config
Signatures
Files
-
5956a1866bb71a304567489cc5a8512e826a10aa56b7e4069e19783f8c9d1559.dll windows x86
33eb74cdd77dab1b168bbaa130115a9d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
CreateFileW
GetProcAddress
LoadLibraryW
user32
PostMessageW
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 503B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ