48fb9c0ed80f14fc97bbe0bf93d4a63b9de2b25fb68ef379208d422f9981d564 | Triage

Sharing

General

Target

48fb9c0ed80f14fc97bbe0bf93d4a63b9de2b25fb68ef379208d422f9981d564
Size

7KB
MD5

e9897c6d31c7ea46c55ae0b4286b97d2
SHA1

f437434128136043ccefed835dd9d5bfc0a4086b
SHA256

48fb9c0ed80f14fc97bbe0bf93d4a63b9de2b25fb68ef379208d422f9981d564
SHA512

9343ef4efa09e8e10d669e660858bf958798d702e8ec11f16f2a6c267f626ccc3ddddf091fa09b402a9289325b39ed4103d61e3df2283c649486068ed6d2dc0a
SSDEEP

192:JR94/b6x5MG0J/yuelpO+auejTTOhYe0:dK6xyGc/yzp/auIPe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48fb9c0ed80f14fc97bbe0bf93d4a63b9de2b25fb68ef379208d422f9981d564

Files

48fb9c0ed80f14fc97bbe0bf93d4a63b9de2b25fb68ef379208d422f9981d564
.dll windows:5 windows x86 arch:x86

01c41bde2e28b577655077042a01522f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 359B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 146B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ