aadb6020f9bc8a8e792d5a0e06a91ef0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aadb6020f9bc8a8e792d5a0e06a91ef0N.exe
Size

6KB
MD5

aadb6020f9bc8a8e792d5a0e06a91ef0
SHA1

ef66d435213cd30f1cf5a41e0bb0f8bd0c9d5b6c
SHA256

d39a7e26ddef7c4398486acd548b2aa0acce6e6a214edde6aa2f3805fd1f6fd8
SHA512

e59d16c92c865133c72ef31a2296f522b9637d08df95b70bb848d744669736281d92a893718a66b110c38808c0f9427a2c3f80f63a0134693bf81754138ac5df
SSDEEP

96:hy859x0P8MaiciBKHDUradP0UO+sBaFUrgSmb9j5rsKrxS:F5oL6JHfF0U53wgbJ6K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aadb6020f9bc8a8e792d5a0e06a91ef0N.exe

Files

aadb6020f9bc8a8e792d5a0e06a91ef0N.exe
.dll windows:5 windows x86 arch:x86

c4c9ecfc26ca516a80b8f6f5b2bdb7e6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryW
GetProcAddress
CreateFileA

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 385B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ