rundll32
Static task
static1
Behavioral task
behavioral1
Sample
1227f32f3367475601e2fc0bb42abc80ea82dfd5d7f752d50cdd6e4b5cde2831.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
1227f32f3367475601e2fc0bb42abc80ea82dfd5d7f752d50cdd6e4b5cde2831.dll
Resource
win10v2004-20240802-en
General
-
Target
1227f32f3367475601e2fc0bb42abc80ea82dfd5d7f752d50cdd6e4b5cde2831
-
Size
6KB
-
MD5
1b66406f089165882697e2065f2d63b2
-
SHA1
af31fc1a3457d037a315555f9faffd3576b636e4
-
SHA256
1227f32f3367475601e2fc0bb42abc80ea82dfd5d7f752d50cdd6e4b5cde2831
-
SHA512
6f44a859b7844a7dd482a86f93537640a06607d7f99c74068e8821c0aa9adb6ea2cf017ef5b8e5f8e886a6216bf1bad81e428cd2768a3480e19c049a4940beef
-
SSDEEP
96:DixZjmjtjd8jPjcZGR5TI2MtXCuwGZ39bnso395oQnKmSu+/tlxgk:unSR6bgYJMA3GtBL395ox2Gtlx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1227f32f3367475601e2fc0bb42abc80ea82dfd5d7f752d50cdd6e4b5cde2831
Files
-
1227f32f3367475601e2fc0bb42abc80ea82dfd5d7f752d50cdd6e4b5cde2831.dll windows:5 windows x86 arch:x86
33eb74cdd77dab1b168bbaa130115a9d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
ReadFile
CreateFileW
GetProcAddress
LoadLibraryW
user32
PostMessageW
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 503B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ