b4f4d9870587efa5cfc0fd1140158580N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4f4d9870587efa5cfc0fd1140158580N.exe
Size

3KB
MD5

b4f4d9870587efa5cfc0fd1140158580
SHA1

1044748c9920f00c1cb8e61e0d76d6c701b0be9c
SHA256

58d621c5277b290dd6d838a53aea2beb553d7a965a861845db9471057a417878
SHA512

73bf9fc1e2380aecb5758d67740ba8013ebea03d9c130663676e3ed6f631ac42d6eb577e307fa25e6a3264d51779a00d0398c7d9666b581860d386ccd2500f9f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4f4d9870587efa5cfc0fd1140158580N.exe

Files

b4f4d9870587efa5cfc0fd1140158580N.exe
.dll windows:5 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress

Exports

Exports

?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32

Sections

.text
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 319B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ