rundll32
Static task
static1
Behavioral task
behavioral1
Sample
84b8d80d70de37cdc4d055cb3b5f926fb96d9f68114d24277d12c8fca44b6e54.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
84b8d80d70de37cdc4d055cb3b5f926fb96d9f68114d24277d12c8fca44b6e54.dll
Resource
win10v2004-20240802-en
General
-
Target
84b8d80d70de37cdc4d055cb3b5f926fb96d9f68114d24277d12c8fca44b6e54
-
Size
6KB
-
MD5
ff0c4c6853d894563b34d0e8729d1c3d
-
SHA1
861b9f5ee0ec754707ae6b026c9ee277535520ea
-
SHA256
84b8d80d70de37cdc4d055cb3b5f926fb96d9f68114d24277d12c8fca44b6e54
-
SHA512
993e63821c8a946215af1db0c2e94363ea15546e79adaa51d91a6ec66f0cf2c3dc90266b78783dc079110ede4d831ebcb53b49f6bc374bc316868f950aa9910a
-
SSDEEP
96:DixZjmjtjd8jPjcZGR5TIq9NMeV7QqXJ6qJFiSlXq/+RhzW:unSR6bgY5HMGb56qtdqGP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 84b8d80d70de37cdc4d055cb3b5f926fb96d9f68114d24277d12c8fca44b6e54
Files
-
84b8d80d70de37cdc4d055cb3b5f926fb96d9f68114d24277d12c8fca44b6e54.dll windows:5 windows x86 arch:x86
33eb74cdd77dab1b168bbaa130115a9d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
ReadFile
CreateFileW
GetProcAddress
LoadLibraryW
user32
PostMessageW
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 503B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ