290385b0753069451115753ff1bef56229a82dd4a135dcc87616bf02223eb7bf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

290385b0753069451115753ff1bef56229a82dd4a135dcc87616bf02223eb7bf
Size

6KB
MD5

2027e0b63be63ce9f2bcf5e06e501c85
SHA1

f70e30ef57048d2fa3c699fb31e044ab48a10811
SHA256

290385b0753069451115753ff1bef56229a82dd4a135dcc87616bf02223eb7bf
SHA512

e6e96f6c2f837561a6802531ac5703a77dac3edb1017a5241d5e63eed0fab3d4c1f24d3dabdc2978868624baddb7c42a47583517335077dd710cbe91ceb03c02
SSDEEP

96:DixZjmjtjd8jPjcZGR5TImSNFxXdR5DgPmAgP7S7:unSR6bgYm5xgT1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
290385b0753069451115753ff1bef56229a82dd4a135dcc87616bf02223eb7bf

Files

290385b0753069451115753ff1bef56229a82dd4a135dcc87616bf02223eb7bf
.dll windows:5 windows x86 arch:x86

33eb74cdd77dab1b168bbaa130115a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
LoadLibraryW

user32

PostMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ