177b0f2468698088c4f58fe8f0f87c5ae89cd2c752eba137264b16d18a56213a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

177b0f2468698088c4f58fe8f0f87c5ae89cd2c752eba137264b16d18a56213a
Size

7KB
MD5

fd9f0a935081461d0c18b2575c257405
SHA1

49088e98b8783c1fa66e71779a3fa3e8995aabfa
SHA256

177b0f2468698088c4f58fe8f0f87c5ae89cd2c752eba137264b16d18a56213a
SHA512

68f0a9d5e5f4ab35a64cab851461f01f3747f8668dec6cfc46e6b881c748ff20e9540e9c71b5489ec98e90c5ffb68894387bbffe18dc57f76847054b0bc70aec
SSDEEP

96:DixZjmjtjd8jPjcZGR5TIucZJPVDK2vGHWZi6VTJsF6SWYsauUUtLdFbOsf6hE:unSR6bgYvcLt2H4iwTu8jauUUrxf6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
177b0f2468698088c4f58fe8f0f87c5ae89cd2c752eba137264b16d18a56213a

Files

177b0f2468698088c4f58fe8f0f87c5ae89cd2c752eba137264b16d18a56213a
.dll windows:5 windows x86 arch:x86

33eb74cdd77dab1b168bbaa130115a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
LoadLibraryW

user32

PostMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ