f6c4cfc20c0b5fb071aaae92ff3aa7c4bcc5eb616bf5fb3a218491a59e2aaca0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6c4cfc20c0b5fb071aaae92ff3aa7c4bcc5eb616bf5fb3a218491a59e2aaca0
Size

7KB
MD5

3ba379637d9dbaab05ca6bb648a4a4d8
SHA1

f78eec948e778bae4539e031c28db972f5a89ce6
SHA256

f6c4cfc20c0b5fb071aaae92ff3aa7c4bcc5eb616bf5fb3a218491a59e2aaca0
SHA512

a2dc3bc3260290dfb86f8a203ac019f416033c51141fa7a3fecfafc951532241f04c6db2b16a31910ae3688f9753a4d8b4bae47590dcdfdbcdb6e4519674b03c
SSDEEP

96:DixZjmjtjd8jPjcZGR5TI7jtDLPq1Q5Z2XOWiXjVYBcHrMEAq:unSR6bgYyarXIF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6c4cfc20c0b5fb071aaae92ff3aa7c4bcc5eb616bf5fb3a218491a59e2aaca0

Files

f6c4cfc20c0b5fb071aaae92ff3aa7c4bcc5eb616bf5fb3a218491a59e2aaca0
.dll windows:5 windows x86 arch:x86

33eb74cdd77dab1b168bbaa130115a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
LoadLibraryW

user32

PostMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ