685cbba75b5a6655b11f454d493208c85fc20f4d2e3189ce7b9e96b891a13f9b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

685cbba75b5a6655b11f454d493208c85fc20f4d2e3189ce7b9e96b891a13f9b
Size

6KB
MD5

4547900a7ff262e865a33650e7f7d2f6
SHA1

eec2fbf65ab0ec307eda3ef7ad1e2e1bba96184f
SHA256

685cbba75b5a6655b11f454d493208c85fc20f4d2e3189ce7b9e96b891a13f9b
SHA512

ebef9d006e1ec56ab3e66924cae7ee7d1bbdd8eb00340dc409567265b8795d37495a4de0d79edb79d1ff5b221c8348f03218a7688071f5718293b707713e9acf
SSDEEP

192:unSR6bgYlHDNzMqVd2dzFdAdxpffOq9FHeyryrQ:uZljNzMqjCzzk7feyryrQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
685cbba75b5a6655b11f454d493208c85fc20f4d2e3189ce7b9e96b891a13f9b

Files

685cbba75b5a6655b11f454d493208c85fc20f4d2e3189ce7b9e96b891a13f9b
.dll windows:5 windows x86 arch:x86

33eb74cdd77dab1b168bbaa130115a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
LoadLibraryW

user32

PostMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ