d8ded7593b728b74606969cfaf669cd540d5b1589fbeaf90f4b3327c91424b21 | Triage

Sharing

General

Target

d8ded7593b728b74606969cfaf669cd540d5b1589fbeaf90f4b3327c91424b21
Size

6KB
MD5

baffcff82f3a3ce067f2a02f93ae7167
SHA1

652b51ad8d53944ac6d607cff03dbd908fde8fba
SHA256

d8ded7593b728b74606969cfaf669cd540d5b1589fbeaf90f4b3327c91424b21
SHA512

2c42afedfb33296c051c32c1bc1bfe7158a392a26148c49c0f003c86619de8ccea839c9815d70aee176b5b28d0631b2810f7dc0d7cded9e52b37b3d399c2ab94
SSDEEP

192:F5oLTn21U6GN9N7WGIN0eYxIaIxfNONsBZIorr6I/IN:F5mTncUf7ZWhzh3pAIy0AN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d8ded7593b728b74606969cfaf669cd540d5b1589fbeaf90f4b3327c91424b21

Files

d8ded7593b728b74606969cfaf669cd540d5b1589fbeaf90f4b3327c91424b21
.dll windows:5 windows x86 arch:x86

c4c9ecfc26ca516a80b8f6f5b2bdb7e6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryW
GetProcAddress
CreateFileA

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 385B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ