0f2136a2783e6963a8200d754ff1306ce8d893cc4a428bc32f47cf8e0fbef35f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f2136a2783e6963a8200d754ff1306ce8d893cc4a428bc32f47cf8e0fbef35f
Size

6KB
MD5

fc3a5b9eec41647c0e0987712745a234
SHA1

8b14e3b21b1ffa351db59824cad2dc8f62cd1094
SHA256

0f2136a2783e6963a8200d754ff1306ce8d893cc4a428bc32f47cf8e0fbef35f
SHA512

253cf3da7f1a26d4a269824238b6d8fbd4803420c619ed88de49a0ed71c523f0579b3a8cf3423793b9ff4a434f4243f6d2dabca0db7a645f7ec58e1db01aee48
SSDEEP

192:unSR6bgY5w5lFUt8PGQAPw2Hl7vCh77PasFTx361:uZa5zUt8PGQAP7F7vK77PasZxK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f2136a2783e6963a8200d754ff1306ce8d893cc4a428bc32f47cf8e0fbef35f

Files

0f2136a2783e6963a8200d754ff1306ce8d893cc4a428bc32f47cf8e0fbef35f
.dll windows:5 windows x86 arch:x86

33eb74cdd77dab1b168bbaa130115a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
LoadLibraryW

user32

PostMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ