a64de2fce864735f1cee1dc339d6898d35d64f6912d45fb95c56665d0718338f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a64de2fce864735f1cee1dc339d6898d35d64f6912d45fb95c56665d0718338f
Size

6KB
MD5

cdf1a69e5f6b36cbc0599c843c2c4bdb
SHA1

1b1179650ea1f84f11d5f33179a5295d3bc3e91c
SHA256

a64de2fce864735f1cee1dc339d6898d35d64f6912d45fb95c56665d0718338f
SHA512

ecf1ddc99dbc4786b67e2059e904514b20f6b9db54fc24428b30376756bb7a0a8efedd2373b6da92324a96182883eb3a74adc6d65fd0b84124c1827d3ee3ae23
SSDEEP

96:hy859x0P8Maj0USdtJI45IHE3L4pkvgPgCvbZZ0eT:F5oLThd3L4qm8e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a64de2fce864735f1cee1dc339d6898d35d64f6912d45fb95c56665d0718338f

Files

a64de2fce864735f1cee1dc339d6898d35d64f6912d45fb95c56665d0718338f
.dll windows:5 windows x86 arch:x86

c4c9ecfc26ca516a80b8f6f5b2bdb7e6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryW
GetProcAddress
CreateFileA

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 385B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ