c42a7a3247413c5eb7fd956525801ee038338dc7f4f7abc9ac33361cd2390891 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c42a7a3247413c5eb7fd956525801ee038338dc7f4f7abc9ac33361cd2390891
Size

6KB
MD5

1fa4c9c190596ce72b69c8a81a972031
SHA1

c8e0ebf1b54d83aff174b364dcbc637e47c39c52
SHA256

c42a7a3247413c5eb7fd956525801ee038338dc7f4f7abc9ac33361cd2390891
SHA512

7bfeccac9e30e0f7767bb8a83df4cf6bf7e7f1e58efd001c0f4df7335c4ce058533b32c7556c5ac69ecc9c00ca2f01499a2d3af736ca4b6ef5dfc98d2a553d47
SSDEEP

96:nEY2RrF1eqwi4FY2zAgGgyoW2v+7oGYpvIS2rqv+F7bVOfWP7Q2WFi6:EHRh1eppdbAy+bSvIS7v+pbVOoyb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c42a7a3247413c5eb7fd956525801ee038338dc7f4f7abc9ac33361cd2390891

Files

c42a7a3247413c5eb7fd956525801ee038338dc7f4f7abc9ac33361cd2390891
.dll windows:5 windows x86 arch:x86

76812f441b0ed9d3cc0748af25d689a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
VirtualAlloc
LoadLibraryW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 423B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ