53a5c79b218cf23f1a52d582ec048ccdbb192ee0aa4ab52c3b84440382977c0b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

53a5c79b218cf23f1a52d582ec048ccdbb192ee0aa4ab52c3b84440382977c0b
Size

6KB
MD5

0c3c978d932b469c1fb2517c7b32933b
SHA1

f085c5cf8fbc53c6ce821971f3c33b195dad42b0
SHA256

53a5c79b218cf23f1a52d582ec048ccdbb192ee0aa4ab52c3b84440382977c0b
SHA512

dff3415fafb26487a8c3e4eef74346ed0ecae16c81609ee532a71b87e2e2ef4fdc84b2f48794eac06af8199bcef7f27684e9e6c0ee14540053c45796f4cb7993
SSDEEP

96:VGEETrMLH5XGej2onjSCii5e3B/fbhnIRi96wVj27+9O++:efMZGgj+aeB/tIRi97VKqO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53a5c79b218cf23f1a52d582ec048ccdbb192ee0aa4ab52c3b84440382977c0b

Files

53a5c79b218cf23f1a52d582ec048ccdbb192ee0aa4ab52c3b84440382977c0b
.dll windows:5 windows x86 arch:x86

a23064e36a7cee786955ca6fd65d4af8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryW
ReadFile
CreateFileW
GetProcAddress
VirtualAlloc
MoveFileExW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1024B - Virtual size: 646B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 517B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ