rundll32
Static task
static1
Behavioral task
behavioral1
Sample
0da125c992689da771a344b75459bc8cf9e043ffb15085023365e3603d1aad6d.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0da125c992689da771a344b75459bc8cf9e043ffb15085023365e3603d1aad6d.dll
Resource
win10v2004-20240802-en
General
-
Target
0da125c992689da771a344b75459bc8cf9e043ffb15085023365e3603d1aad6d
-
Size
7KB
-
MD5
1332a27d8202f1a24e924a84a1875d7a
-
SHA1
2d9a286b6e856a2ef074f9beadcfb3091d4d7e4e
-
SHA256
0da125c992689da771a344b75459bc8cf9e043ffb15085023365e3603d1aad6d
-
SHA512
4933fd2a9ca87aacb81a6b96342a1c07b09b68ea03f9e0a9c23e997c04e5be78400f5c4d602b88d3f5e7c255b32ec1d2c47b7f4b0dd69fbcf7bf853ed91745bd
-
SSDEEP
96:DixZjmjtjd8jPjcZGR5TIUcmp1XQ7UMAZsWl1+0:unSR6bgYpcmbA7UzT1+0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0da125c992689da771a344b75459bc8cf9e043ffb15085023365e3603d1aad6d
Files
-
0da125c992689da771a344b75459bc8cf9e043ffb15085023365e3603d1aad6d.dll windows:5 windows x86 arch:x86
33eb74cdd77dab1b168bbaa130115a9d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
ReadFile
CreateFileW
GetProcAddress
LoadLibraryW
user32
PostMessageW
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 503B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ