de0b2202f87e267f0208c596d50cf36491fd82f87190764e52b5e04ffe5d0c99 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de0b2202f87e267f0208c596d50cf36491fd82f87190764e52b5e04ffe5d0c99
Size

3KB
MD5

16616c86ae709c20cdf7e680aa246656
SHA1

086ae96024c903a40996667c93d6d7944b91044c
SHA256

de0b2202f87e267f0208c596d50cf36491fd82f87190764e52b5e04ffe5d0c99
SHA512

6347b7f9b2e6c7b44726e5cee11cdc652a7758feedd684eb7da517e93fefcce87c8d6a154a118ae05426081885310fd6f950782160d6dccf449557bb870d3cc0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de0b2202f87e267f0208c596d50cf36491fd82f87190764e52b5e04ffe5d0c99

Files

de0b2202f87e267f0208c596d50cf36491fd82f87190764e52b5e04ffe5d0c99
.dll windows:5 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress

Exports

Exports

?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32

Sections

.text
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 319B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ