eaf45f1925116e7381ed08d8f21320460825f7f2c3914772f0c2a0a2c61544df | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eaf45f1925116e7381ed08d8f21320460825f7f2c3914772f0c2a0a2c61544df
Size

6KB
MD5

dff2a03203c0d572dee8142f91840bd0
SHA1

e3100e7b680c085361e03e3ee5dfdf8914892fd2
SHA256

eaf45f1925116e7381ed08d8f21320460825f7f2c3914772f0c2a0a2c61544df
SHA512

66475688fe6700dd27106c0457bca784f661064193c79016c4af4cf79634e11b6b0342eab11e9be7c127e6008f19d0a7fa12f896c4d93717c6e306029e0f0c33
SSDEEP

96:nEY2RrF1eqwi46j9hUv0u8ljPQDgiA1hfBa8GoLkPc14pdy:EHRh1eppYi0u8p1hfE8GoCc1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eaf45f1925116e7381ed08d8f21320460825f7f2c3914772f0c2a0a2c61544df

Files

eaf45f1925116e7381ed08d8f21320460825f7f2c3914772f0c2a0a2c61544df
.dll windows:5 windows x86 arch:x86

76812f441b0ed9d3cc0748af25d689a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
VirtualAlloc
LoadLibraryW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 423B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ