rundll32
Static task
static1
Behavioral task
behavioral1
Sample
0321b9e7ec50facb29dcbb23fb13dab4528f58f98c6863350f43fd26a7fbb488.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0321b9e7ec50facb29dcbb23fb13dab4528f58f98c6863350f43fd26a7fbb488.dll
Resource
win10v2004-20240802-en
General
-
Target
0321b9e7ec50facb29dcbb23fb13dab4528f58f98c6863350f43fd26a7fbb488
-
Size
6KB
-
MD5
f1b35e4b2dec2a35dfffce39fb620f66
-
SHA1
c4ccf7aff20e0783c8be8e657e6ae8e99b8d1b87
-
SHA256
0321b9e7ec50facb29dcbb23fb13dab4528f58f98c6863350f43fd26a7fbb488
-
SHA512
5f3304a80e5e37ad5781f19d4e85c06b98062cb5261463e57a03f8ab4c93a23a9bff687b0d639e0a78c7c44641c098f31a704657037785c08e1c45d85ba10b18
-
SSDEEP
96:hy859x0P8MaJsJcJ4e7tMT9OFjQ7zw2maP6mxvgI58Bj:F5oL3ItM0FjAzwJYVOe8F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0321b9e7ec50facb29dcbb23fb13dab4528f58f98c6863350f43fd26a7fbb488
Files
-
0321b9e7ec50facb29dcbb23fb13dab4528f58f98c6863350f43fd26a7fbb488.dll windows:5 windows x86 arch:x86
c4c9ecfc26ca516a80b8f6f5b2bdb7e6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryW
GetProcAddress
CreateFileA
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 1020B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 385B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 124B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ