cc9053baf016b2cfc6d373f5d078e735b04cea706892af74b943d3d8dda20129 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cc9053baf016b2cfc6d373f5d078e735b04cea706892af74b943d3d8dda20129
Size

5KB
MD5

cb6ea47bbf753dfeded434669027f895
SHA1

e78db2af46ff53f9897b7e48f177056c1e1b0026
SHA256

cc9053baf016b2cfc6d373f5d078e735b04cea706892af74b943d3d8dda20129
SHA512

b73ad7cda007aee9253cb46a637644ae379a5a99ca382b8f960216a7365103c8b2b87525d62544af299fd192a4dd8a0717b2672d4048418d3f996edf65d2ef5e
SSDEEP

96:nEY2RrF1eqwi4ZhKAod4BbSuh0Lt1QTy5urTFW:EHRh1eppZhIob5+LtD8W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc9053baf016b2cfc6d373f5d078e735b04cea706892af74b943d3d8dda20129

Files

cc9053baf016b2cfc6d373f5d078e735b04cea706892af74b943d3d8dda20129
.dll windows:5 windows x86 arch:x86

76812f441b0ed9d3cc0748af25d689a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
VirtualAlloc
LoadLibraryW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 423B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ