06b530395d597e4b559edf0ae0f7a4b82f63716beda520e44185c79b13a1be29 | Triage

Sharing

General

Target

06b530395d597e4b559edf0ae0f7a4b82f63716beda520e44185c79b13a1be29
Size

7KB
MD5

fe7aa8fd7024c0c1f37c6e5ac263a007
SHA1

9cb981cc99fe3b89bbc2e99c6b397338f0fc6525
SHA256

06b530395d597e4b559edf0ae0f7a4b82f63716beda520e44185c79b13a1be29
SHA512

bfb23cc98452cf8b0ae55a1f82e87a41dfa73b20ce782a5d62e3d8dfd739986429174ea406ffcf45721d51fd0cf5272284aaf4cc22b7cb37873fd6bdd4a608f2
SSDEEP

96:DixZjmjtjd8jPjcZGR5TIxvLH8jxEkr2JalteN+hKESdcrSg5+2r:unSR6bgY48jykrZlteN+hKEzrF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06b530395d597e4b559edf0ae0f7a4b82f63716beda520e44185c79b13a1be29

Files

06b530395d597e4b559edf0ae0f7a4b82f63716beda520e44185c79b13a1be29
.dll windows:5 windows x86 arch:x86

33eb74cdd77dab1b168bbaa130115a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
LoadLibraryW

user32

PostMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ