6db6238bf061c76f0a30a7cec80d9277584638ffedc2028f9ad00a5b85c47296 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6db6238bf061c76f0a30a7cec80d9277584638ffedc2028f9ad00a5b85c47296
Size

7KB
MD5

3e949fa94c089b5239ee8c57e12b16d3
SHA1

4c6b5efe7fb23bf102d9b5c3be3875e7c37ecc0a
SHA256

6db6238bf061c76f0a30a7cec80d9277584638ffedc2028f9ad00a5b85c47296
SHA512

951b2eddcb4485831a34defcb95ec9f50b88da6127149902d0f01c44e098d38c69f2d5e02fb37d137ea2aafd6bf9895ffbc999af508c57dd5a2e0b6c533336ab
SSDEEP

96:hyZxm/jmjhjvj3jcZGV41TMoZw/OdeHV+MjPMiGhE:2M/SdjbgYuTNuOdeHV+MjPOhE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6db6238bf061c76f0a30a7cec80d9277584638ffedc2028f9ad00a5b85c47296

Files

6db6238bf061c76f0a30a7cec80d9277584638ffedc2028f9ad00a5b85c47296
.dll windows:5 windows x86 arch:x86

75da6d602dafd9b4f3554a4462742a19

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
GetProcAddress
LoadLibraryW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 421B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 130B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ