a6a340e0d5d26632bd009d70a10321c1abdf280b7d11eee33597f4ef3f544842 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a6a340e0d5d26632bd009d70a10321c1abdf280b7d11eee33597f4ef3f544842
Size

6KB
MD5

0f20ff381fe8814202ff12b86891c35e
SHA1

948239eb4432e5981f64ff40cc11107b2ebc4e58
SHA256

a6a340e0d5d26632bd009d70a10321c1abdf280b7d11eee33597f4ef3f544842
SHA512

959291ccc02875ec7537e58bdb80f646b41a40b474d590e03af40b5da3d18eefae0cb6018b38b2cb0e313a9f673825bd2cdc52296219a2acfafba98ede706fb6
SSDEEP

96:hy859x0P8MaGi9sgY6073AcbyyDk1TZzJtTkSZzpTzr5:F5oLbi9s1NP1O/TpzpXt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6a340e0d5d26632bd009d70a10321c1abdf280b7d11eee33597f4ef3f544842

Files

a6a340e0d5d26632bd009d70a10321c1abdf280b7d11eee33597f4ef3f544842
.dll windows:5 windows x86 arch:x86

c4c9ecfc26ca516a80b8f6f5b2bdb7e6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryW
GetProcAddress
CreateFileA

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 385B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ