67e7db2db724d6121c03056a2433ae40N[.]exe | Triage

Sharing

General

Target

67e7db2db724d6121c03056a2433ae40N.exe
Size

3KB
MD5

67e7db2db724d6121c03056a2433ae40
SHA1

89d8700777920f4902a308267d2a84b7eeb0bb71
SHA256

bbeefff8f2d2627db86db8f8c8b326f94c2bcc9db96db394194d8ee16e13a76a
SHA512

f0c6991c7342b7d9cfd439779f7e8481f95ee122050a640c2dd37e6d56bd5d3a05e424ccacb324580e5403594542f1150e062f8bce23188efbd75117ac2e41cd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67e7db2db724d6121c03056a2433ae40N.exe

Files

67e7db2db724d6121c03056a2433ae40N.exe
.dll windows:5 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress

Exports

Exports

?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32

Sections

.text
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 319B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ