rundll32
Static task
static1
Behavioral task
behavioral1
Sample
2f1bed73116b2fbafa1db7fd72e0a990N.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
2f1bed73116b2fbafa1db7fd72e0a990N.dll
Resource
win10v2004-20240802-en
General
-
Target
2f1bed73116b2fbafa1db7fd72e0a990N.exe
-
Size
7KB
-
MD5
2f1bed73116b2fbafa1db7fd72e0a990
-
SHA1
060a3cfa75b9f748085c588dee9cf1da6420e7fd
-
SHA256
60a5f95cb0b641ffb06593ade4b115fbe6642e644c6268e88adcca93812a156e
-
SHA512
d32edf1641da3db7b17ad22de5ebc1a28fba1b5228020b394266fcfad8fcf55e161472992a8567ce4001a0f9636c726c56d305fbdcd1b2f9b0c1cbe35ae5fc45
-
SSDEEP
96:DixZjmjtjd8jPjcZGR5TIWoElxofMiZwDV4PNlsjCptg6APSAo+0+qgup15vtliK:unSR6bgYhl3GVlqoI0QgZtc9c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f1bed73116b2fbafa1db7fd72e0a990N.exe
Files
-
2f1bed73116b2fbafa1db7fd72e0a990N.exe.dll windows:5 windows x86 arch:x86
33eb74cdd77dab1b168bbaa130115a9d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
ReadFile
CreateFileW
GetProcAddress
LoadLibraryW
user32
PostMessageW
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 503B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ