f07959a98218e9aec4245b98e81f8b30N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f07959a98218e9aec4245b98e81f8b30N
Size

3KB
MD5

f07959a98218e9aec4245b98e81f8b30
SHA1

ba63e3557ab64b82af2eb76b99194360801440c2
SHA256

68876b2e8de9fd5c8ba9782d5c83a0c9a49e50b878ef7c8899cf6965d4b1f043
SHA512

5aead1179e5d55ba92b9a8d96da8074a1d012dc730d3cf0e642e4cc23f1c40cc0b82dcf262453dc6c1e076db82bf01cb7dc9a809032b86abd81f3e8756074c79

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f07959a98218e9aec4245b98e81f8b30N

Files

f07959a98218e9aec4245b98e81f8b30N
.dll windows:5 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress

Exports

Exports

?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32

Sections

.text
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 319B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ