rundll32
Static task
static1
Behavioral task
behavioral1
Sample
df86f5ced4b4b07ecd7776e2bc9d1ba29b29c00c06d292160e987b7c53ec0353.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
df86f5ced4b4b07ecd7776e2bc9d1ba29b29c00c06d292160e987b7c53ec0353.dll
Resource
win10v2004-20240426-en
General
-
Target
df86f5ced4b4b07ecd7776e2bc9d1ba29b29c00c06d292160e987b7c53ec0353
-
Size
5KB
-
MD5
8ff7b8fded964b30a98861c4c5d3260d
-
SHA1
4b5f6ccec37a56aefa372e9c4b34e087a9d0c06e
-
SHA256
df86f5ced4b4b07ecd7776e2bc9d1ba29b29c00c06d292160e987b7c53ec0353
-
SHA512
961ba59378569d1e523f4ea80ddbd38a9126da271ed33a8cec8e6d321b6a74353b3d44dbfd8f298220d364c03d1a5fbd9a56d8307ce55e271daa9107bd42a5be
-
SSDEEP
96:hyZxm/jmjhjvj3jcZGV48YYvSSfTTTeYYYLSSS47YYYFtT:2M/SdjbgYvSSxSSSD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df86f5ced4b4b07ecd7776e2bc9d1ba29b29c00c06d292160e987b7c53ec0353
Files
-
df86f5ced4b4b07ecd7776e2bc9d1ba29b29c00c06d292160e987b7c53ec0353.dll windows:5 windows x86 arch:x86
75da6d602dafd9b4f3554a4462742a19
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateFileW
GetProcAddress
LoadLibraryW
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 421B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 130B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ