11775c75e5ff426cb658383a87bcc6e84029a6ddfb41b40e6243b98172d2e12f | Triage

Sharing

General

Target

11775c75e5ff426cb658383a87bcc6e84029a6ddfb41b40e6243b98172d2e12f
Size

6KB
MD5

a845b0bdecc9df72acc1016d7e535506
SHA1

df2ff82d3b98455033b4da7098bc5ffdb7d3f7e6
SHA256

11775c75e5ff426cb658383a87bcc6e84029a6ddfb41b40e6243b98172d2e12f
SHA512

08d4b18f5f7aca3c055bfcc4ad776799d40bba6068ea8f667d1c4f5b551da445910a3d57b189fb8e380e2ecbb9fb60a10064a68c8ee01014cac8c8c43c96449a
SSDEEP

96:hy859x0P8MaC4sD/QzOpfKoW9o1DjfnpYF6tHM5L:F5oL94y/QkfKoWK1Djfnqso

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11775c75e5ff426cb658383a87bcc6e84029a6ddfb41b40e6243b98172d2e12f

Files

11775c75e5ff426cb658383a87bcc6e84029a6ddfb41b40e6243b98172d2e12f
.dll windows:5 windows x86 arch:x86

c4c9ecfc26ca516a80b8f6f5b2bdb7e6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryW
GetProcAddress
CreateFileA

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 385B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ