rundll32
Static task
static1
Behavioral task
behavioral1
Sample
8c4da11bc17d0b3c82cfd3944dd5e076ffc0d7a5f512ec9517a16b62be3c5dcb.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8c4da11bc17d0b3c82cfd3944dd5e076ffc0d7a5f512ec9517a16b62be3c5dcb.dll
Resource
win10v2004-20240226-en
General
-
Target
8c4da11bc17d0b3c82cfd3944dd5e076ffc0d7a5f512ec9517a16b62be3c5dcb
-
Size
6KB
-
MD5
e93408b758b24fa80d413829546eca6e
-
SHA1
7422456b4e1d5244f541ed52a9513d4e26e9e725
-
SHA256
8c4da11bc17d0b3c82cfd3944dd5e076ffc0d7a5f512ec9517a16b62be3c5dcb
-
SHA512
9d503c1e47432230c6f94d2a841d5cba6fc81d5a36b713c5bdb3112b34245c3c217f660e31de683b5c0a8b0c11d013acbdf3aafefdec2e014de782631656d252
-
SSDEEP
96:hy859x0P8Maw8aaDNczbRoRUQYhNMBtAx36JDV/blT:F5oLj8ZibRcYFx3o5B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c4da11bc17d0b3c82cfd3944dd5e076ffc0d7a5f512ec9517a16b62be3c5dcb
Files
-
8c4da11bc17d0b3c82cfd3944dd5e076ffc0d7a5f512ec9517a16b62be3c5dcb.dll windows:5 windows x86 arch:x86
c4c9ecfc26ca516a80b8f6f5b2bdb7e6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryW
GetProcAddress
CreateFileA
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 1020B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 385B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 124B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ