cb0bd583e5b99b522622378a6c52dd6db3e5fb38e1e551b658f6f8fc29723fda | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb0bd583e5b99b522622378a6c52dd6db3e5fb38e1e551b658f6f8fc29723fda
Size

6KB
MD5

ae1a7ed12428ee030c7600025e72643d
SHA1

15a4c849a2ac20bcdd8a91ff64fc1607db62946a
SHA256

cb0bd583e5b99b522622378a6c52dd6db3e5fb38e1e551b658f6f8fc29723fda
SHA512

6961af3c5c6c20290fe34494adfa6f2eac49b4c12ba64deda48c5f45508a22cc98f6242504471791f7e5bf0db76717be0e556796b46f2cdff77f5c3b1ca8ddac
SSDEEP

96:DixZjmjtjd8jPjcZGR5TIv+nCucbvOpUVpvks74MlXxryMTym3YTqJ4:unSR6bgYebOmVZksEMXxryYymcqJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb0bd583e5b99b522622378a6c52dd6db3e5fb38e1e551b658f6f8fc29723fda

Files

cb0bd583e5b99b522622378a6c52dd6db3e5fb38e1e551b658f6f8fc29723fda
.dll windows:5 windows x86 arch:x86

33eb74cdd77dab1b168bbaa130115a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
LoadLibraryW

user32

PostMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ