663488620f93fb0b66ee0528bf16e0b9b74bcc3ce1e3ed7a11330ba5c491bb42 | Triage

Sharing

General

Target

663488620f93fb0b66ee0528bf16e0b9b74bcc3ce1e3ed7a11330ba5c491bb42
Size

6KB
MD5

fcc887120164b2deff22c49d3d428a5e
SHA1

56e3056c7eb30fc527672fcec45cfd7a38e38dbe
SHA256

663488620f93fb0b66ee0528bf16e0b9b74bcc3ce1e3ed7a11330ba5c491bb42
SHA512

3e599968a03946ee5f68adc0f4cc0e04fffc26282c4cc1b7e1b2dd0f09f4a042684bc94bdab07e6db7689c8719d4678d231204aa075a1cf41692c2d8ca34c0b2
SSDEEP

96:DixZjmjtjd8jPjcZGR5TI2330mC1sthE/MNwX3xCt5:unSR6bgY53ElaTbIY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
663488620f93fb0b66ee0528bf16e0b9b74bcc3ce1e3ed7a11330ba5c491bb42

Files

663488620f93fb0b66ee0528bf16e0b9b74bcc3ce1e3ed7a11330ba5c491bb42
.dll windows:5 windows x86 arch:x86

33eb74cdd77dab1b168bbaa130115a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
LoadLibraryW

user32

PostMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ