rundll32
Static task
static1
Behavioral task
behavioral1
Sample
b671546c427fd4116bb1a117703cdb2325f6dfad0ae6e94b5782bc805e23a178.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b671546c427fd4116bb1a117703cdb2325f6dfad0ae6e94b5782bc805e23a178.dll
Resource
win10v2004-20240802-en
General
-
Target
b671546c427fd4116bb1a117703cdb2325f6dfad0ae6e94b5782bc805e23a178
-
Size
6KB
-
MD5
a35d76c1d89149e303a6a3ffbcb11f25
-
SHA1
5759098033268c3a4d49a772eff259ff015e06ea
-
SHA256
b671546c427fd4116bb1a117703cdb2325f6dfad0ae6e94b5782bc805e23a178
-
SHA512
3b29b3f1a324120d06c0193ec2066cc8e7d4b9942b8c6ec5c17542277f07fdfa46e8fbc3342d90dc9b0c0d77a89fe9a9b79fd2b1aad26bbe4435ca62150c1a76
-
SSDEEP
48:CCy86+Wet9Q/iooHeiefhe+/lSMYEqOzTNH6dautLGuHs8B40znKKdJ4sDgTUEjv:hy859x0P8MaOzTNH6R5MiXnzdJgZZN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b671546c427fd4116bb1a117703cdb2325f6dfad0ae6e94b5782bc805e23a178
Files
-
b671546c427fd4116bb1a117703cdb2325f6dfad0ae6e94b5782bc805e23a178.dll windows:5 windows x86 arch:x86
c4c9ecfc26ca516a80b8f6f5b2bdb7e6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryW
GetProcAddress
CreateFileA
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 1020B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 385B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 124B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ