ccccf548d5d0b9a70da13bb2481cced6c8eb804d629280aed3ae1d888eea459d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ccccf548d5d0b9a70da13bb2481cced6c8eb804d629280aed3ae1d888eea459d
Size

3KB
MD5

4fcdfe06bb4570fce12f19096510ee73
SHA1

525ac231263f82164b9f0e3e73a1ed5d034782e1
SHA256

ccccf548d5d0b9a70da13bb2481cced6c8eb804d629280aed3ae1d888eea459d
SHA512

c5830984fb92decfd675c92733048514e26cbd530d81caa87a1b705092a3ae617590598c9c503f3de444a251776be7e9a369efbd50990d372cc2b8a18eb942fd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ccccf548d5d0b9a70da13bb2481cced6c8eb804d629280aed3ae1d888eea459d

Files

ccccf548d5d0b9a70da13bb2481cced6c8eb804d629280aed3ae1d888eea459d
.dll windows:5 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress

Exports

Exports

?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32

Sections

.text
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 319B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ