d346829085e3b814a3199d9efbdc7bd0fb67e28e3512b3ef3c7ba754997fcc64 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d346829085e3b814a3199d9efbdc7bd0fb67e28e3512b3ef3c7ba754997fcc64
Size

6KB
MD5

4b52588e6a37d52b7a5e4f51407253f5
SHA1

0ee40ccbbd4d6a230d00d928c97a5ab5abe7d84c
SHA256

d346829085e3b814a3199d9efbdc7bd0fb67e28e3512b3ef3c7ba754997fcc64
SHA512

63c51e9142b4ec6e1f684b852650e53bd9094d55e29e72f33f8528209e56808a3484796d6edc7233fc7299781f3fd75342dfbf6616ba964223a2f17e103ef1c2
SSDEEP

96:DixZjmjtjd8jPjcZGR5TI0GqaqqI7ssse5JJJJJJJlDH1+xGcscN:unSR6bgYtV+xGKN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d346829085e3b814a3199d9efbdc7bd0fb67e28e3512b3ef3c7ba754997fcc64

Files

d346829085e3b814a3199d9efbdc7bd0fb67e28e3512b3ef3c7ba754997fcc64
.dll windows:5 windows x86 arch:x86

33eb74cdd77dab1b168bbaa130115a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
LoadLibraryW

user32

PostMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ