dff3a518271e7b0b7f9698a8a47e4f39aa68cf2121079cdd678962789a955777 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dff3a518271e7b0b7f9698a8a47e4f39aa68cf2121079cdd678962789a955777
Size

6KB
MD5

0128bf09f80b9a82e56699ed12addbea
SHA1

dfe6a173a6d0d85c3b3983754587ec69c1206b51
SHA256

dff3a518271e7b0b7f9698a8a47e4f39aa68cf2121079cdd678962789a955777
SHA512

0ab3b644dc856f9d8b40121593507055eee8cb92287f48cb7641820256b28a01e90ec5381c16fb242f057bb57a6baec55b97fe36048b8b60c26f1c61955df9c0
SSDEEP

96:DixZjmjtjd8jPjcZGR5TImInIjY+Azvpum/hD3U1/ORsj4GdgUcF1XGKl4Q:unSR6bgYnIiADC5Btdg3F1XN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dff3a518271e7b0b7f9698a8a47e4f39aa68cf2121079cdd678962789a955777

Files

dff3a518271e7b0b7f9698a8a47e4f39aa68cf2121079cdd678962789a955777
.dll windows:5 windows x86 arch:x86

33eb74cdd77dab1b168bbaa130115a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
LoadLibraryW

user32

PostMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ