199ffe2d52e403f5c3255dc9e9729a0cc3cb25fe921d45f522c216bffc3f1780 | Triage

Sharing

General

Target

199ffe2d52e403f5c3255dc9e9729a0cc3cb25fe921d45f522c216bffc3f1780
Size

7KB
MD5

f158ba5146ef31292305cf35767933e2
SHA1

aafa41e1d6588e0829d29ce3c82b8d4731e42f9f
SHA256

199ffe2d52e403f5c3255dc9e9729a0cc3cb25fe921d45f522c216bffc3f1780
SHA512

83c9a7e10a30e56804d333bb891dc0ed4eca6d458bf8d46262656f61b1117d43b54e123f4fc207ae421a144fe0192107e4e54b60d3bf08da2ce8938bcb5d8b04
SSDEEP

192:unSR6bgYM80dlTqEKf3I+vxVsJPSPSBH5Z:uZAyTAB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
199ffe2d52e403f5c3255dc9e9729a0cc3cb25fe921d45f522c216bffc3f1780

Files

199ffe2d52e403f5c3255dc9e9729a0cc3cb25fe921d45f522c216bffc3f1780
.dll windows:5 windows x86 arch:x86

33eb74cdd77dab1b168bbaa130115a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
LoadLibraryW

user32

PostMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ