rundll32
Static task
static1
Behavioral task
behavioral1
Sample
3557351ffaca58a7d02ade90edca198c4dc98dd4094f6916bb4fd8f0859519d2N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3557351ffaca58a7d02ade90edca198c4dc98dd4094f6916bb4fd8f0859519d2N.dll
Resource
win10v2004-20240802-en
General
-
Target
3557351ffaca58a7d02ade90edca198c4dc98dd4094f6916bb4fd8f0859519d2N.exe
-
Size
6KB
-
MD5
53ccbd5592d0895d5f07285c3ed15480
-
SHA1
dcb6a1c19c33d0038d1da28216f53d02ed72c117
-
SHA256
3557351ffaca58a7d02ade90edca198c4dc98dd4094f6916bb4fd8f0859519d2
-
SHA512
8ef50c30df9fa457253f9ba6db08aabf0b51e1f3fe8292974140c64ad2571dd2191dde877cf76d6dbf5f435b537ab90be7535fb5c499a65c149e0e5d508f0093
-
SSDEEP
96:DixZjmjtjd8jPjcZGR5TIEhqxKpMmfm09YWqln+jrM/vpRs7Ass7ZAAplu:unSR6bgY5hOK6mfB9YRh/vpRmWGAr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3557351ffaca58a7d02ade90edca198c4dc98dd4094f6916bb4fd8f0859519d2N.exe
Files
-
3557351ffaca58a7d02ade90edca198c4dc98dd4094f6916bb4fd8f0859519d2N.exe.dll windows:5 windows x86 arch:x86
33eb74cdd77dab1b168bbaa130115a9d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
ReadFile
CreateFileW
GetProcAddress
LoadLibraryW
user32
PostMessageW
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 503B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ