cf0bdfe9768f88cbf26f31413d75c6eba481e77afb1c97fdef2702bf1dd38308 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf0bdfe9768f88cbf26f31413d75c6eba481e77afb1c97fdef2702bf1dd38308
Size

6KB
MD5

9f37f7e2e2b1d7272c818dd34aa9000a
SHA1

f22305da86cf6740ba05f4294d5370c3c003ba72
SHA256

cf0bdfe9768f88cbf26f31413d75c6eba481e77afb1c97fdef2702bf1dd38308
SHA512

60e5469dbd417a44e4f2bc82f1074ef905e7f53a61d0611af59c8748eedeb7991b74f65a91d141221696efa88577715ff27650b6c76e880ef16901dc79d59ff0
SSDEEP

96:hy859x0P8MaWR1ff8jBLTO1qyit+viIrwcaW:F5oLj1ff8jBLaqpkqkwY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf0bdfe9768f88cbf26f31413d75c6eba481e77afb1c97fdef2702bf1dd38308

Files

cf0bdfe9768f88cbf26f31413d75c6eba481e77afb1c97fdef2702bf1dd38308
.dll windows:5 windows x86 arch:x86

c4c9ecfc26ca516a80b8f6f5b2bdb7e6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryW
GetProcAddress
CreateFileA

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 385B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ