rundll32
Static task
static1
Behavioral task
behavioral1
Sample
20f55563a9e392eb21dbfc1f25ef75b715d9b500a7cc956ca0a884f1968456c3.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
20f55563a9e392eb21dbfc1f25ef75b715d9b500a7cc956ca0a884f1968456c3.dll
Resource
win10v2004-20240802-en
General
-
Target
20f55563a9e392eb21dbfc1f25ef75b715d9b500a7cc956ca0a884f1968456c3
-
Size
6KB
-
MD5
615bcb74a96c3dd5d3cbc3a5114b2d53
-
SHA1
b5891996a371210fc40c465ff0642c53b81a5c47
-
SHA256
20f55563a9e392eb21dbfc1f25ef75b715d9b500a7cc956ca0a884f1968456c3
-
SHA512
a54b4f1ea7ca03f22e8fc5392692647b923d29ac5a755c22eb4f9d0f10909830109bdd51a2fd562fe393cb7fbb9d5f01e309158b4973c06f3059e8133fb1615c
-
SSDEEP
96:hy859x0P8MaFqF2Rk7h3Z9EoPpZ6dHHeG3KoMl:F5oLIqFrNu1u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20f55563a9e392eb21dbfc1f25ef75b715d9b500a7cc956ca0a884f1968456c3
Files
-
20f55563a9e392eb21dbfc1f25ef75b715d9b500a7cc956ca0a884f1968456c3.dll windows:5 windows x86 arch:x86
c4c9ecfc26ca516a80b8f6f5b2bdb7e6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryW
GetProcAddress
CreateFileA
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 1020B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 385B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 124B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ