b15328c25ad02379261e0e9f01a4b160N[.]exe | Triage

Sharing

General

Target

b15328c25ad02379261e0e9f01a4b160N.exe
Size

3KB
MD5

b15328c25ad02379261e0e9f01a4b160
SHA1

dbba007e4461d5e5a5eceb7c951c25eae30dd1d9
SHA256

8f165c38c074bad38bd02a2922d407e0d0d307c3a9747ae9298ef21e515cb6e8
SHA512

eb8ac1ac8ddd484b71ae7fcc99af9fe76f35f89a12113921ab0ae58262d0d7d1df7dc4f471bcf97ca37626e6eb95226607848960d5dff0b19129b53f4f2bcfa8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b15328c25ad02379261e0e9f01a4b160N.exe

Files

b15328c25ad02379261e0e9f01a4b160N.exe
.dll windows:5 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress

Exports

Exports

?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32

Sections

.text
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 319B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ