rundll32
Static task
static1
Behavioral task
behavioral1
Sample
2042b7b8f9272a4cf7a8a90f9b41fd5b9168f40d98aae52c1bdbaa7b67f2bec1.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2042b7b8f9272a4cf7a8a90f9b41fd5b9168f40d98aae52c1bdbaa7b67f2bec1.dll
Resource
win10v2004-20240412-en
General
-
Target
2042b7b8f9272a4cf7a8a90f9b41fd5b9168f40d98aae52c1bdbaa7b67f2bec1
-
Size
5KB
-
MD5
aab7259c1dd00c86195a413e0bdb5a02
-
SHA1
e7849fbfae762e5c16bbd44dfd9adcad430a0928
-
SHA256
2042b7b8f9272a4cf7a8a90f9b41fd5b9168f40d98aae52c1bdbaa7b67f2bec1
-
SHA512
ceb8031c83f3a68f8a988e0b1cd21d249b5cb996121788cbf35172dc77609102bf0da3111f47413269eb010396e9f484c6f385dd294f362954dbf64fddeca2d6
-
SSDEEP
96:hy859x0P8MaxR53znld6D3bLoJ4xDllbQ:F5oLqnldELu4xH0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2042b7b8f9272a4cf7a8a90f9b41fd5b9168f40d98aae52c1bdbaa7b67f2bec1
Files
-
2042b7b8f9272a4cf7a8a90f9b41fd5b9168f40d98aae52c1bdbaa7b67f2bec1.dll windows:5 windows x86 arch:x86
c4c9ecfc26ca516a80b8f6f5b2bdb7e6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryW
GetProcAddress
CreateFileA
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 1020B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 385B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 124B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ