f005c66df754d3da2d7ca16f7fa9f9e0N[.]exe | Triage

Sharing

General

Target

f005c66df754d3da2d7ca16f7fa9f9e0N.exe
Size

5KB
MD5

f005c66df754d3da2d7ca16f7fa9f9e0
SHA1

9f5712b7ccab84791e23108eb705e6c1236a9fc2
SHA256

438d95a33de89cf73cb869c18e4b9b8c076b36651a314bdd2942b516b86aa4e7
SHA512

ca60484401ae1bf8888a37221fd9b7e64757617e3a39ecbcac5c8afeab7d1aa45914879a71f61070ea0831c27dec652a0bf6ee1e33ade8d2c90015d993aa40dd
SSDEEP

96:hy859x0P8MaLHlwGNXPVhNby3dOcJWgxGyr2fx/n9hiJPZ4sH:F5oLulwiX9xc9xzr2fhnsnH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f005c66df754d3da2d7ca16f7fa9f9e0N.exe

Files

f005c66df754d3da2d7ca16f7fa9f9e0N.exe
.dll windows:5 windows x86 arch:x86

c4c9ecfc26ca516a80b8f6f5b2bdb7e6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryW
GetProcAddress
CreateFileA

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 385B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ