bee7ac8c937bb6356c61ab7720d91cb3cfe5844f4efe9aa5854fb704e626a89d | Triage

Sharing

General

Target

bee7ac8c937bb6356c61ab7720d91cb3cfe5844f4efe9aa5854fb704e626a89d
Size

7KB
MD5

6f3f3cdab79b1cc7d208e2d2f020fe71
SHA1

c1eed6eb8e979bec19496358f2badd5511a8f373
SHA256

bee7ac8c937bb6356c61ab7720d91cb3cfe5844f4efe9aa5854fb704e626a89d
SHA512

13f1f65f27188d4728727da074c18492b42e4716c7379ab481bb17e8ed6cf3441a21595db980d9d9b4e0c8f11c83c8d7d862f67b169d0ef0e5bc56dfd1f1612f
SSDEEP

96:DixZjmjtjd8jPjcZGR5TIteOv2Jdgxb5/nAVYEmazUEqEy1Z85K200iV:unSR6bgYEGSxbVADqEy1Z8liV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bee7ac8c937bb6356c61ab7720d91cb3cfe5844f4efe9aa5854fb704e626a89d

Files

bee7ac8c937bb6356c61ab7720d91cb3cfe5844f4efe9aa5854fb704e626a89d
.dll windows:5 windows x86 arch:x86

33eb74cdd77dab1b168bbaa130115a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
LoadLibraryW

user32

PostMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ