5639419f6bc39c2754ff78ce700f36062d64e4fe74d93227b2570ca6d590eddc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5639419f6bc39c2754ff78ce700f36062d64e4fe74d93227b2570ca6d590eddc
Size

6KB
MD5

80e12a2f393006850fd0dae39ea52b31
SHA1

4e45d16e7d515d1840378d7e31bf6166425d5a6c
SHA256

5639419f6bc39c2754ff78ce700f36062d64e4fe74d93227b2570ca6d590eddc
SHA512

0599168fc805866360e55974b7bbd2a073bf4e2f54e45db4f48a0cfeaadfd557e4d0bbe0f29f21c4888aa3419c5900de341d52b576c6f1845a18ca35c0b40fa7
SSDEEP

96:DixZjmjtjd8jPjcZGR5TIEl0qhuypK9bc0q1dyMs:unSR6bgYZl0Uu39befVs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5639419f6bc39c2754ff78ce700f36062d64e4fe74d93227b2570ca6d590eddc

Files

5639419f6bc39c2754ff78ce700f36062d64e4fe74d93227b2570ca6d590eddc
.dll windows:5 windows x86 arch:x86

33eb74cdd77dab1b168bbaa130115a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
LoadLibraryW

user32

PostMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ