a74c650bb09fa130974295a0848433ca2a5d95b8e715bad346debe8ff53b498d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a74c650bb09fa130974295a0848433ca2a5d95b8e715bad346debe8ff53b498d
Size

3KB
MD5

f064794c37e80b58eafaf2128ad59a41
SHA1

97d0cc6544784c32fe1876150472c72d24402043
SHA256

a74c650bb09fa130974295a0848433ca2a5d95b8e715bad346debe8ff53b498d
SHA512

0217a980350ea9d28513487f6094916c5d6ca2ef449f87e94dbfc481cff6b16a9c98027a153d18b5dff0e16396d8b9f8e58cacc46e9028745bff37b7e08db886

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a74c650bb09fa130974295a0848433ca2a5d95b8e715bad346debe8ff53b498d

Files

a74c650bb09fa130974295a0848433ca2a5d95b8e715bad346debe8ff53b498d
.dll windows:5 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress

Exports

Exports

?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32

Sections

.text
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 319B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ