ac16f85626c5fe1d107802636d85393f0b787c3f179617ee126cb46e6caaaaec | Triage

Sharing

General

Target

ac16f85626c5fe1d107802636d85393f0b787c3f179617ee126cb46e6caaaaec
Size

3KB
MD5

abd4516c19aa0e859826a3edd6a4e789
SHA1

d4604a2f89739bf5e1db80f5595f8fb3d9800062
SHA256

ac16f85626c5fe1d107802636d85393f0b787c3f179617ee126cb46e6caaaaec
SHA512

0a03d4d58ac007d9cea2b53de5eb53e51f5c2049517c30f411ca780a583412f4545314affa20b7355a22148429154dbd75ff909a44e42f0edbedbb073d205ad4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac16f85626c5fe1d107802636d85393f0b787c3f179617ee126cb46e6caaaaec

Files

ac16f85626c5fe1d107802636d85393f0b787c3f179617ee126cb46e6caaaaec
.dll windows:5 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress

Exports

Exports

?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32

Sections

.text
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 319B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ