b771954efd87e2cc69d37ba37c0289de149e5c1581d784ef5a6bdff133748e49 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b771954efd87e2cc69d37ba37c0289de149e5c1581d784ef5a6bdff133748e49
Size

6KB
MD5

02bb1cdaa7e4b45b1728c24302f45bfb
SHA1

e8ce97f15214b8f6359ad41c11d1c88fe3c54489
SHA256

b771954efd87e2cc69d37ba37c0289de149e5c1581d784ef5a6bdff133748e49
SHA512

11cb56b7fe15f9fdd1a17a7eb4d3d6a6a429ef1759c228ee5b48cb034f8be5bd74ee22e19e6899bfba39e5d9b6a6ae2f5287bad229c25bc464e106353c0e648b
SSDEEP

96:nEY2RrF1eqwi4ht5vDh6q+rahpux0yT5bw5thihWH0:EHRh1eppnVDhP+Gux0CuH0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b771954efd87e2cc69d37ba37c0289de149e5c1581d784ef5a6bdff133748e49

Files

b771954efd87e2cc69d37ba37c0289de149e5c1581d784ef5a6bdff133748e49
.dll windows:5 windows x86 arch:x86

76812f441b0ed9d3cc0748af25d689a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
VirtualAlloc
LoadLibraryW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 423B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ