fbca316c97c51a949046ae94499899bb5dda559cae1c81233e6407cd29c25d57 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fbca316c97c51a949046ae94499899bb5dda559cae1c81233e6407cd29c25d57
Size

6KB
MD5

33b3695c756acf7317bff9a5bfe07e63
SHA1

a01701cd88770d619de0eae656cbfa9a932b0d55
SHA256

fbca316c97c51a949046ae94499899bb5dda559cae1c81233e6407cd29c25d57
SHA512

4ce2ce3f21ee769787645a3eba1127db7693eb1fa746472f161535da1d27f25b7c066ff7f0b560f1bd69fe12c7974e17c312cd33506c3805f79102a33df33ea6
SSDEEP

96:DixZjmjtjd8jPjcZGR5TIhAwdi22cVVMUDNQAlTzngesooqTA2tto:unSR6bgYqAU7X1kec

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbca316c97c51a949046ae94499899bb5dda559cae1c81233e6407cd29c25d57

Files

fbca316c97c51a949046ae94499899bb5dda559cae1c81233e6407cd29c25d57
.dll windows:5 windows x86 arch:x86

33eb74cdd77dab1b168bbaa130115a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
LoadLibraryW

user32

PostMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ