fcf4fb81a4813a2725f88cde576766f1df6da49c1e3390bfcdd392e6028ed048 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fcf4fb81a4813a2725f88cde576766f1df6da49c1e3390bfcdd392e6028ed048
Size

6KB
MD5

4150a87d6b0e81bdc4c0810f52f4ff21
SHA1

ec7ffc95681328ff16d61953ce17de02f841c901
SHA256

fcf4fb81a4813a2725f88cde576766f1df6da49c1e3390bfcdd392e6028ed048
SHA512

e2a90b68fc123f998ab39ffb5632d75d391f57d2fc054a8496dc6b203419dd949c39f309cdb86619688b13641cd52fe68c01877e4ce81121dc5a77c62c3bb56c
SSDEEP

96:DixZjmjtjd8jPjcZGR5TIF+RHB7ld5PiGvYhRKIOjm:unSR6bgYe6B7n38f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fcf4fb81a4813a2725f88cde576766f1df6da49c1e3390bfcdd392e6028ed048

Files

fcf4fb81a4813a2725f88cde576766f1df6da49c1e3390bfcdd392e6028ed048
.dll windows:5 windows x86 arch:x86

33eb74cdd77dab1b168bbaa130115a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
LoadLibraryW

user32

PostMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ