rundll32
Static task
static1
Behavioral task
behavioral1
Sample
1f4d3c4ff7f3dbda9bd15452c235b180N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1f4d3c4ff7f3dbda9bd15452c235b180N.dll
Resource
win10v2004-20240802-en
General
-
Target
1f4d3c4ff7f3dbda9bd15452c235b180N.exe
-
Size
7KB
-
MD5
1f4d3c4ff7f3dbda9bd15452c235b180
-
SHA1
21fb880766547b2c252f3fce307cb7f28a9bfe4e
-
SHA256
bfa793b20dda9b9e6ace852aaf2f43759a8d9b10e41b0afa061733f88fde1e52
-
SHA512
7901a461eff99a9c45728f7736c0ed91fd494abd2f7bd6039ecf119758984e66980d70b0ec7544dfeed77cfbf919a1624877fd800b3ebfdc349608d24780fbea
-
SSDEEP
48:SfIBj0W6/aGxkaklS4rklStklSd8klSPklSTIZGifi5qwlGsPvwo/aTYuyB8KHoa:DixZjmjtjd8jPjcZGR5TI/C8e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1f4d3c4ff7f3dbda9bd15452c235b180N.exe
Files
-
1f4d3c4ff7f3dbda9bd15452c235b180N.exe.dll windows:5 windows x86 arch:x86
33eb74cdd77dab1b168bbaa130115a9d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
ReadFile
CreateFileW
GetProcAddress
LoadLibraryW
user32
PostMessageW
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 503B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ