3b9ab9f3289dec70a1ff20ff037b1ff0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b9ab9f3289dec70a1ff20ff037b1ff0N.exe
Size

3KB
MD5

3b9ab9f3289dec70a1ff20ff037b1ff0
SHA1

b1f2cdaa6286edec460c853d16e7e77b323f4312
SHA256

53cf0fc6b85527120f545d090e1e21c04d331f3884311db6475687e4955f42b5
SHA512

63ae7295639a6959270f32137d938eec07a4147713eac941bdd802aa9f455715d881ade9e6414fa7b13ae3ed9a83b3c486949441d2d67dce1312796e3744703e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b9ab9f3289dec70a1ff20ff037b1ff0N.exe

Files

3b9ab9f3289dec70a1ff20ff037b1ff0N.exe
.dll windows:5 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress

Exports

Exports

?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32

Sections

.text
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 319B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ