26731a590b3a2ce59d7564dfa54335f61af01c5280b79b60e1360f0a4b29fcaa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26731a590b3a2ce59d7564dfa54335f61af01c5280b79b60e1360f0a4b29fcaa
Size

7KB
MD5

28ccd5f8d1191bc8c3cf1e437bece9b1
SHA1

313eb67ea2b0171bcf33cff73382ffda5764f296
SHA256

26731a590b3a2ce59d7564dfa54335f61af01c5280b79b60e1360f0a4b29fcaa
SHA512

fe219101832bf15737a8b497313e55e332ab46821f0d51bc9dd48fa9d8511b982e5dc908c0f554b67d6c98c2228714286d50fbb5cd850f44e062edddc3db2cd3
SSDEEP

96:DixZjmjtjd8jPjcZGR5TIQHluMvJPPAewiakrZLwnBXw8Ed+hf:unSR6bgYJ/PPA/iak1MXUYf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26731a590b3a2ce59d7564dfa54335f61af01c5280b79b60e1360f0a4b29fcaa

Files

26731a590b3a2ce59d7564dfa54335f61af01c5280b79b60e1360f0a4b29fcaa
.dll windows:5 windows x86 arch:x86

33eb74cdd77dab1b168bbaa130115a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
LoadLibraryW

user32

PostMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ