rundll32
Static task
static1
Behavioral task
behavioral1
Sample
475c86c6dc37aa0c3cfddbd0d9978370N.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
475c86c6dc37aa0c3cfddbd0d9978370N.dll
Resource
win10v2004-20240802-en
General
-
Target
475c86c6dc37aa0c3cfddbd0d9978370N.exe
-
Size
6KB
-
MD5
475c86c6dc37aa0c3cfddbd0d9978370
-
SHA1
bb6598b09eabe67b73255490a1fc02776032034d
-
SHA256
88963f41897b5c6b76ecd85e3547e5ebd89a044b06cb811a1c1e9e3a836280f2
-
SHA512
79d7e9ab898e7f7af984a3769beb490d3ac2b580f948f6f4d6b83bee02e58b882cc288db4b0699aad57932d47102cdca5729d0c979b33686bc174642f64674cb
-
SSDEEP
96:hy859x0P8MazUneJg7j+EdMsfxdECfgTGf60Odxwt77:F5oL0CeWeEEhdq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 475c86c6dc37aa0c3cfddbd0d9978370N.exe
Files
-
475c86c6dc37aa0c3cfddbd0d9978370N.exe.dll windows:5 windows x86 arch:x86
c4c9ecfc26ca516a80b8f6f5b2bdb7e6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryW
GetProcAddress
CreateFileA
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 1020B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 385B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 124B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ