baae0940397581a59fa18adca045d3c3aacf3f8c4a16e3073b20205846cdc149 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

baae0940397581a59fa18adca045d3c3aacf3f8c4a16e3073b20205846cdc149
Size

6KB
MD5

85de46d5a7479f48e0a321b0585806ac
SHA1

de9ffb472466e8d367f464cb91f4e0a5291ac4c4
SHA256

baae0940397581a59fa18adca045d3c3aacf3f8c4a16e3073b20205846cdc149
SHA512

66fe2178a7aae8633c0c4a46a55c8d9e533f220e7c6c44e3eec5d024f6d5dfd02139e9e073c28236517004db7827c5604a91bf3d73666290d977a20a46288393
SSDEEP

96:nEY2RrF1eqwi45r++ook6q+4dU62vUcKIXkMB8EKR0YF:EHRh1epp5r++oA4X2vUTI0M2DpF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
baae0940397581a59fa18adca045d3c3aacf3f8c4a16e3073b20205846cdc149

Files

baae0940397581a59fa18adca045d3c3aacf3f8c4a16e3073b20205846cdc149
.dll windows:5 windows x86 arch:x86

76812f441b0ed9d3cc0748af25d689a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
VirtualAlloc
LoadLibraryW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 423B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ