d91f3de0a0181f76cfb6b74449bc0c139782a99dfd2b675c0a57dd0e38a02413 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d91f3de0a0181f76cfb6b74449bc0c139782a99dfd2b675c0a57dd0e38a02413
Size

6KB
MD5

ce59015f76287f0e9f484e90bebdd1cf
SHA1

a855f53295c1d486be662b7e3a5278eefac3c0cd
SHA256

d91f3de0a0181f76cfb6b74449bc0c139782a99dfd2b675c0a57dd0e38a02413
SHA512

2d59ea20d798a324b5c0f3fc6417bde45476b02392f63e6be92bd6a2d1ac06b9a0f3d2d3fcd0203c89a15e898bc8aae9c2cb8ece920dba16e559c192fad6af8e
SSDEEP

96:VGEETrMLH5plciHhd9RbdWVSGneJRvcFIV8c:efMNbHhd9VdWVSvmpc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d91f3de0a0181f76cfb6b74449bc0c139782a99dfd2b675c0a57dd0e38a02413

Files

d91f3de0a0181f76cfb6b74449bc0c139782a99dfd2b675c0a57dd0e38a02413
.dll windows:5 windows x86 arch:x86

a23064e36a7cee786955ca6fd65d4af8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryW
ReadFile
CreateFileW
GetProcAddress
VirtualAlloc
MoveFileExW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1024B - Virtual size: 646B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 517B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ