rundll32
Static task
static1
Behavioral task
behavioral1
Sample
30dfa3148829405b45d2b565f773e89ed88bfa044c888e668cd9769d707401a2N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
30dfa3148829405b45d2b565f773e89ed88bfa044c888e668cd9769d707401a2N.dll
Resource
win10v2004-20240910-en
General
-
Target
30dfa3148829405b45d2b565f773e89ed88bfa044c888e668cd9769d707401a2N
-
Size
7KB
-
MD5
1c09671b994ee15ef29a797541301fd0
-
SHA1
4e109d88ade45920745a8b6f3743ed20dc9decd8
-
SHA256
30dfa3148829405b45d2b565f773e89ed88bfa044c888e668cd9769d707401a2
-
SHA512
8c46b6bb6cea8686bc18b899681244ce4b4f3da1b67064e5e0eec8d0b6194f7e5cad4db158f6e64e8356b44913b1dc61b3f06edde7912e2763b76a67f5a8b0e0
-
SSDEEP
96:z0QR9B6BvAwbMVOQm6VG4ZMvWR0yIpW7Q9hkJSKD//X+:JR94/bsOH6VZAp5hSBD3u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30dfa3148829405b45d2b565f773e89ed88bfa044c888e668cd9769d707401a2N
Files
-
30dfa3148829405b45d2b565f773e89ed88bfa044c888e668cd9769d707401a2N.dll windows:5 windows x86 arch:x86
01c41bde2e28b577655077042a01522f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 359B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 146B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ