rundll32
Static task
static1
Behavioral task
behavioral1
Sample
a5bd8ff003fa1b33f094709d37e826a5ebabb48a006d0e19a589da208cdcc556.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a5bd8ff003fa1b33f094709d37e826a5ebabb48a006d0e19a589da208cdcc556.dll
Resource
win10v2004-20240419-en
General
-
Target
a5bd8ff003fa1b33f094709d37e826a5ebabb48a006d0e19a589da208cdcc556
-
Size
6KB
-
MD5
6c466745931de8af4694a71a2f1fe9ff
-
SHA1
0c0a31d68b65c4dee02ebe755a82cf701c09d073
-
SHA256
a5bd8ff003fa1b33f094709d37e826a5ebabb48a006d0e19a589da208cdcc556
-
SHA512
6c41fb73fff4881a11465ffcaf6461a0d72339f47089eea316b3f65ca0438ddfb478690fb0eac781f99109a9de02ca9e879b59fc9dfbb6464da36a145ac8e7f1
-
SSDEEP
96:z0QR9B6BvAwb/vDi0htYAmO0tqJhHVHZxLvCmOE5bugTmjsp:JR94/b/vDigtCO2qJ9VH5OE5bugijsp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a5bd8ff003fa1b33f094709d37e826a5ebabb48a006d0e19a589da208cdcc556
Files
-
a5bd8ff003fa1b33f094709d37e826a5ebabb48a006d0e19a589da208cdcc556.dll windows:5 windows x86 arch:x86
01c41bde2e28b577655077042a01522f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 359B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 146B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ