f4bf35ca6b51e49713f3801a6fb783d6947409d5e3c8643b384c3a889ec94b97 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f4bf35ca6b51e49713f3801a6fb783d6947409d5e3c8643b384c3a889ec94b97
Size

7KB
MD5

8f2e75f3ea244886f16af62c65b392f2
SHA1

0c5462b713f3a5143c63d73d0441e7f03c79dad0
SHA256

f4bf35ca6b51e49713f3801a6fb783d6947409d5e3c8643b384c3a889ec94b97
SHA512

1b83ab1e2d2b18cb4e33307aba72bd21daff9bc63794cea613045960698fd265329869222610084debc4a27dbb513ff5fea3be4b821c27486d7dd228a3693849
SSDEEP

96:DixZjmjtjd8jPjcZGR5TI037uJNBrteULuxhPUhnHhS+PORaLhqV1RnMN8TLl:unSR6bgYz37uJIULuxWB3PwV1L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f4bf35ca6b51e49713f3801a6fb783d6947409d5e3c8643b384c3a889ec94b97

Files

f4bf35ca6b51e49713f3801a6fb783d6947409d5e3c8643b384c3a889ec94b97
.dll windows:5 windows x86 arch:x86

33eb74cdd77dab1b168bbaa130115a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
LoadLibraryW

user32

PostMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ