e96bfcda7100b2c330e969fe8bcc9fa2d80a0f209020dc8a1d931e3bd70d6d69 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e96bfcda7100b2c330e969fe8bcc9fa2d80a0f209020dc8a1d931e3bd70d6d69
Size

3KB
MD5

f07f7c732201ad18c5b9bd49b8c6e5b5
SHA1

8b1dec1da7c913e7803d8513adf2002595bcfdd5
SHA256

e96bfcda7100b2c330e969fe8bcc9fa2d80a0f209020dc8a1d931e3bd70d6d69
SHA512

48156929186cd4cd70475b1681012a9d3f4c7491e181e03e45bdeb37b8395aadb0abb2c080b081d6b411e8ae9f29dfa7871d72baaef61cb8765588fd40460833

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e96bfcda7100b2c330e969fe8bcc9fa2d80a0f209020dc8a1d931e3bd70d6d69

Files

e96bfcda7100b2c330e969fe8bcc9fa2d80a0f209020dc8a1d931e3bd70d6d69
.dll windows:5 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress

Exports

Exports

?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32

Sections

.text
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 319B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ