9518f4946fcc8d7bafb221c06bd98890N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9518f4946fcc8d7bafb221c06bd98890N.exe
Size

3KB
MD5

9518f4946fcc8d7bafb221c06bd98890
SHA1

e14ab71645cb859bc744d42e44952ae26e06de38
SHA256

1e32185e7067f9e08e65a8733f228434ad5655e286647bc0b1079198c042219d
SHA512

9a3b5a7dbde46da34c5f0f44b50bedd486af05d15177d67248397dbd286d9aec2ed18801fd75c001b89ed40c6b124b35b6783b4d3d90f2a8cb3eda748dd394dd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9518f4946fcc8d7bafb221c06bd98890N.exe

Files

9518f4946fcc8d7bafb221c06bd98890N.exe
.dll windows:5 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress

Exports

Exports

?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32

Sections

.text
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 319B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ