f77720462b9a0a4485bc8f0bf558e727c3fa58910df3e95bd7e25b412d3a9c86 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f77720462b9a0a4485bc8f0bf558e727c3fa58910df3e95bd7e25b412d3a9c86
Size

7KB
MD5

fe888d1dfcf7f4d1cf1c13d21a30a9ee
SHA1

c99cd9602d8c69f428af4bc77b5e9b5627f947a6
SHA256

f77720462b9a0a4485bc8f0bf558e727c3fa58910df3e95bd7e25b412d3a9c86
SHA512

41d53b7ceda87eceff76c442676f62a1619c23b9ca133904ae421114a2ec544f1d4a5611ac6f5c4a8544396baa485afd95dcc0b8c4de9cc9ed1620acefa94d09
SSDEEP

96:DixZjmjtjd8jPjcZGR5TIuHJ9hR95TxJleMH5VJH3aq7u4M:unSR6bgYrHJn1UkvHKq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f77720462b9a0a4485bc8f0bf558e727c3fa58910df3e95bd7e25b412d3a9c86

Files

f77720462b9a0a4485bc8f0bf558e727c3fa58910df3e95bd7e25b412d3a9c86
.dll windows:5 windows x86 arch:x86

33eb74cdd77dab1b168bbaa130115a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
LoadLibraryW

user32

PostMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ