ad92415dcbef939a3b8fbc5f302563c68854287a66f42642f55de7030526b034 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad92415dcbef939a3b8fbc5f302563c68854287a66f42642f55de7030526b034
Size

6KB
MD5

efc2cd58bed2cbea9199eab6e86f64ce
SHA1

3987e6a59a7f885ccd07e3b2d4cb42ed6dd33e01
SHA256

ad92415dcbef939a3b8fbc5f302563c68854287a66f42642f55de7030526b034
SHA512

81b7c8ba8731889a154b8962bcdb1f6b436f7badc6b61ec62faaf9273bb1e79c79583165ef21169c0eb1a5f9ee064c374d8cce8f6e1343d4026801be8d16072b
SSDEEP

96:DixZjmjtjd8jPjcZGR5TIXLWSoSCUIhUGg6jd9OP:unSR6bgYepXIhUGjOP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad92415dcbef939a3b8fbc5f302563c68854287a66f42642f55de7030526b034

Files

ad92415dcbef939a3b8fbc5f302563c68854287a66f42642f55de7030526b034
.dll windows:5 windows x86 arch:x86

33eb74cdd77dab1b168bbaa130115a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
LoadLibraryW

user32

PostMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ