6e6047122de01123b40fc99b2c14b31a5471003d052d385a76a5b7bce88e774b | Triage

Sharing

General

Target

6e6047122de01123b40fc99b2c14b31a5471003d052d385a76a5b7bce88e774b
Size

7KB
MD5

3e934b49e2f92bc46e63050dd81e5cf0
SHA1

9989da796980272ac519943a45d32023afada67a
SHA256

6e6047122de01123b40fc99b2c14b31a5471003d052d385a76a5b7bce88e774b
SHA512

f2875a10afb6421905345041f2b78e59d374fd92f269c8c4ea9a526cb7f5fba32b24e622dfe3230c3006c2708cc4a4f0167e6f05277d8c8fc6ede70191f31ea4
SSDEEP

96:VGEETrMLH5GkQMGWML4OiOv7oVoFAKghY/aGvJYDfxzhrCchNAo:efMhQRWML4U/FTghY/amJ0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6e6047122de01123b40fc99b2c14b31a5471003d052d385a76a5b7bce88e774b

Files

6e6047122de01123b40fc99b2c14b31a5471003d052d385a76a5b7bce88e774b
.dll windows:5 windows x86 arch:x86

a23064e36a7cee786955ca6fd65d4af8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryW
ReadFile
CreateFileW
GetProcAddress
VirtualAlloc
MoveFileExW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1024B - Virtual size: 646B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 517B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ