rundll32
Static task
static1
Behavioral task
behavioral1
Sample
631ff2b0d2f0b132933fbf37fc1b8532925d7b84785b68284480cda06dcdea96N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
631ff2b0d2f0b132933fbf37fc1b8532925d7b84785b68284480cda06dcdea96N.dll
Resource
win10v2004-20240802-en
General
-
Target
631ff2b0d2f0b132933fbf37fc1b8532925d7b84785b68284480cda06dcdea96N.exe
-
Size
7KB
-
MD5
412cc4576def249c223885116911afd0
-
SHA1
bd9383a93ade861f287cf3fc0dffc0f2c12a9e88
-
SHA256
631ff2b0d2f0b132933fbf37fc1b8532925d7b84785b68284480cda06dcdea96
-
SHA512
bac8be14c2325f431083e1c54d0f357417e4dcb742ee30e2e066a248430a0782b11e58365c48722d170b108cb6ec6e9ea554b99742cb08aa1de2f556ea734a5e
-
SSDEEP
96:Hxvtj+jhjvj3jcZGOiI/eFcrTxe9QSP7/oEq6gQ6svCSTSk9Z:H5t6djbgYRQwcrvSPsl6ll
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 631ff2b0d2f0b132933fbf37fc1b8532925d7b84785b68284480cda06dcdea96N.exe
Files
-
631ff2b0d2f0b132933fbf37fc1b8532925d7b84785b68284480cda06dcdea96N.exe.dll windows:5 windows x86 arch:x86
e819b2c070effcc973ac007bba8ffedd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateFileW
GetProcAddress
LoadLibraryW
user32
PostMessageW
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 485B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 134B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ