rundll32
Static task
static1
Behavioral task
behavioral1
Sample
78973ddc9147ad0baa09c816f7b4d110N.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
78973ddc9147ad0baa09c816f7b4d110N.dll
Resource
win10v2004-20240709-en
General
-
Target
78973ddc9147ad0baa09c816f7b4d110N.exe
-
Size
6KB
-
MD5
78973ddc9147ad0baa09c816f7b4d110
-
SHA1
ba7a873f09d4442967b005bcaf42e68b42e09e35
-
SHA256
5af7338deec88de77d26e9fae2f6291dfe5148f679596154afb948442b731ad2
-
SHA512
774d6b6413e4aa940a55c4c690d98bdb172d439ddc407ee5a7006bd0ac6885e17426c48757d479370259c791e04dfcffc806b099396f2ff9a403bb84adb61995
-
SSDEEP
192:EHRh1eppbamegou2auUBQXHCzDOj1g7V:EHROomegoTauXizDOjY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 78973ddc9147ad0baa09c816f7b4d110N.exe
Files
-
78973ddc9147ad0baa09c816f7b4d110N.exe.dll windows:5 windows x86 arch:x86
76812f441b0ed9d3cc0748af25d689a3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
ReadFile
CreateFileW
GetProcAddress
VirtualAlloc
LoadLibraryW
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 512B - Virtual size: 510B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 423B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 584B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ