877bbfb33ed7d58df9cd8abf080c44853f86db9f8a45505744c5135823283a87 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

877bbfb33ed7d58df9cd8abf080c44853f86db9f8a45505744c5135823283a87
Size

6KB
MD5

4180e21ea3024997220913a5be136a9d
SHA1

6a3afb9733a7127d5cdd6528ba27a93f7d9833ff
SHA256

877bbfb33ed7d58df9cd8abf080c44853f86db9f8a45505744c5135823283a87
SHA512

a9a65d171aa0252d38abba3aae8e8cbeea571ac779e2dba0a68419c1dfbf28366dc5ea1479c6a59324f3ad5ada8b1c00d7a6ff210b6e19fc1f91aee6c298af53
SSDEEP

96:DixZjmjtjd8jPjcZGR5TIC8ZQ9be+NuF4KaoHF1UaYfo:unSR6bgYrQQ9K+k3XHMe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
877bbfb33ed7d58df9cd8abf080c44853f86db9f8a45505744c5135823283a87

Files

877bbfb33ed7d58df9cd8abf080c44853f86db9f8a45505744c5135823283a87
.dll windows:5 windows x86 arch:x86

33eb74cdd77dab1b168bbaa130115a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
LoadLibraryW

user32

PostMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ