4755ef647c3ad349db3b4255b01697806ebb7d835e5de56e6fdea052276b9926 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4755ef647c3ad349db3b4255b01697806ebb7d835e5de56e6fdea052276b9926
Size

7KB
MD5

59cd2e659d09ea6ef8eadd7fc2fed5be
SHA1

69c20a0ddf730ba7e0677c602c3dd76b69e175ff
SHA256

4755ef647c3ad349db3b4255b01697806ebb7d835e5de56e6fdea052276b9926
SHA512

51d84f3bcf5d787a2906c014db15ad7ab6ceb7c6cdbed8636a315b5e88576436b182f23a8c6aaaca92fee2cb5dbb9c4168db521c670d0e35315b7d9971c1823f
SSDEEP

96:DixZjmjtjd8jPjcZGR5TIyR5Q76M9n2WC9Q7fU4MkkkBSGo23fx143k4Rw+i1Ly:unSR6bgYJQmM92qYTRYvx1o1zl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4755ef647c3ad349db3b4255b01697806ebb7d835e5de56e6fdea052276b9926

Files

4755ef647c3ad349db3b4255b01697806ebb7d835e5de56e6fdea052276b9926
.dll windows:5 windows x86 arch:x86

33eb74cdd77dab1b168bbaa130115a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
LoadLibraryW

user32

PostMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ