cbef91c6f2b7b1da9f4e7abca24a6c9ed00f9edc2f37c8c5091a3f8a629b8a8f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cbef91c6f2b7b1da9f4e7abca24a6c9ed00f9edc2f37c8c5091a3f8a629b8a8f
Size

7KB
MD5

17f9c7d5903f78e7fcdbe5acd54edc40
SHA1

f9aa55189805f865513a64fe0c45c2d8ec43d04b
SHA256

cbef91c6f2b7b1da9f4e7abca24a6c9ed00f9edc2f37c8c5091a3f8a629b8a8f
SHA512

2153290c0a8f84153a6426436bf1d58b8a07244045a7f28c75a12e84bf05fb244f70161846b3c6cd94c1ff616e9ae8ea22042b47f4364a5668c3e562c53527b0
SSDEEP

96:VGEETrMLH5gm+9ZZC+yPVIViHDxl6sKMZuZ1vv2P1VUr:efMuPfZryPKVilEsr6H2N0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cbef91c6f2b7b1da9f4e7abca24a6c9ed00f9edc2f37c8c5091a3f8a629b8a8f

Files

cbef91c6f2b7b1da9f4e7abca24a6c9ed00f9edc2f37c8c5091a3f8a629b8a8f
.dll windows:5 windows x86 arch:x86

a23064e36a7cee786955ca6fd65d4af8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryW
ReadFile
CreateFileW
GetProcAddress
VirtualAlloc
MoveFileExW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1024B - Virtual size: 646B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 517B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ