edc65ad2db376bcc16f1b5c738cccd54d16a0db6e25abab7d35469caaec8faa3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

edc65ad2db376bcc16f1b5c738cccd54d16a0db6e25abab7d35469caaec8faa3
Size

5KB
MD5

4968c5b1432ed37d0aebef5cf8d75927
SHA1

13ae8e6335934535257666a8be5495dd0feac379
SHA256

edc65ad2db376bcc16f1b5c738cccd54d16a0db6e25abab7d35469caaec8faa3
SHA512

dcfe87852a17b89108f8f73cd9befc367420d3ee178a139a64273f5a3d6ff7e277f6b8d0b2b98f9d1ee40a2cf189b37a7170cf4cd076ca61daa301f75d4900fc
SSDEEP

96:nEY2RrF1eqwi4SsGtu96X7YicRwMfFqwgbvOjhKU:EHRh1eppDGtu96Xsic/lwOjhp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
edc65ad2db376bcc16f1b5c738cccd54d16a0db6e25abab7d35469caaec8faa3

Files

edc65ad2db376bcc16f1b5c738cccd54d16a0db6e25abab7d35469caaec8faa3
.dll windows:5 windows x86 arch:x86

76812f441b0ed9d3cc0748af25d689a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
VirtualAlloc
LoadLibraryW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 423B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ