9ab5cf11f0fc187515b99f5faafeeabcc6810ce243d737399614b4e0b8518c97 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9ab5cf11f0fc187515b99f5faafeeabcc6810ce243d737399614b4e0b8518c97
Size

6KB
MD5

8073ad3b7a1cb730489d752ca720f69b
SHA1

91e32a28b183e248996ab63465950e58d4c4af08
SHA256

9ab5cf11f0fc187515b99f5faafeeabcc6810ce243d737399614b4e0b8518c97
SHA512

bc0068741a8d16e72d023f0e6abacec03e8c8c3e4eea15a2224461c6df30f81261fa80363a0ec61d47822033f41e4f71503d89263631b776a250b00d9854ff27
SSDEEP

96:DixZjmjtjd8jPjcZGR5TIikffebBMRSu+5In5gYSSSSSSSF8V:unSR6bgY8ffeb+RSnO5XSSSSSSSeV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9ab5cf11f0fc187515b99f5faafeeabcc6810ce243d737399614b4e0b8518c97

Files

9ab5cf11f0fc187515b99f5faafeeabcc6810ce243d737399614b4e0b8518c97
.dll windows:5 windows x86 arch:x86

33eb74cdd77dab1b168bbaa130115a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
LoadLibraryW

user32

PostMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ