rundll32
Static task
static1
Behavioral task
behavioral1
Sample
ca75e264eb334385430de6532c861500N.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ca75e264eb334385430de6532c861500N.dll
Resource
win10v2004-20240802-en
General
-
Target
ca75e264eb334385430de6532c861500N.exe
-
Size
6KB
-
MD5
ca75e264eb334385430de6532c861500
-
SHA1
9a988d6926db63ffccf11e0a78ccfffce6604f39
-
SHA256
c6fe83db543b7d6522d83bfd69e1cb6abdfcfd07abcde8661799ce0a86147145
-
SHA512
fbcb89c895ec6eaf0eb93a7dae4557e7e2be00665a4e5c05127cf00a94f0309b23d1043ee5a6b200f5a5f598573e0c6839e23d0a55a0b25364d7ff66aa798b02
-
SSDEEP
96:DixZjmjtjd8jPjcZGR5TIKXYHQh1HPqPTPrs3Ch/tdR2UKGDXJBa8r5GrkGoly2o:unSR6bgYbRCrz5ttdRl0wMkdpstQ0j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca75e264eb334385430de6532c861500N.exe
Files
-
ca75e264eb334385430de6532c861500N.exe.dll windows:5 windows x86 arch:x86
33eb74cdd77dab1b168bbaa130115a9d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
ReadFile
CreateFileW
GetProcAddress
LoadLibraryW
user32
PostMessageW
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 503B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ