519fad4304ea90cb4d6c7a470660329ca0041aeedba90482fa7f6a084987bb43 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

519fad4304ea90cb4d6c7a470660329ca0041aeedba90482fa7f6a084987bb43
Size

3KB
MD5

1605f3b76c9b92e4a18f1664b231bcde
SHA1

99d4773f5cb9b138911f3550c88f3ead96fcd6ef
SHA256

519fad4304ea90cb4d6c7a470660329ca0041aeedba90482fa7f6a084987bb43
SHA512

8f478e6cc612dc9b2e59a310c4086747845dcfacc71a99cfab7d10cc838bc18aa71827d71437681030a81a52628c0fa91750704acd5033e9eb48e20d57057e3d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
519fad4304ea90cb4d6c7a470660329ca0041aeedba90482fa7f6a084987bb43

Files

519fad4304ea90cb4d6c7a470660329ca0041aeedba90482fa7f6a084987bb43
.dll windows:5 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress

Exports

Exports

?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32

Sections

.text
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 319B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ