158874b8743ba884363035b10f34d69155aeaaffc12f8f1b0e0c76de5145aae4 | Triage

Sharing

General

Target

158874b8743ba884363035b10f34d69155aeaaffc12f8f1b0e0c76de5145aae4
Size

3KB
MD5

94dace40d22ebb36ef7e2c4ae483233c
SHA1

c55812bd071d7d6d1034d44cdbe2fb3f022a8377
SHA256

158874b8743ba884363035b10f34d69155aeaaffc12f8f1b0e0c76de5145aae4
SHA512

bf61d0bd7e886483985e1494b8cf04a20c343f44834d71b51e3c0a44a40ab619b9edae46053a3a9a93e14f9cabe017e37179b39daa97da72284b4a5b7d7a1df5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
158874b8743ba884363035b10f34d69155aeaaffc12f8f1b0e0c76de5145aae4

Files

158874b8743ba884363035b10f34d69155aeaaffc12f8f1b0e0c76de5145aae4
.dll windows:5 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress

Exports

Exports

?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32

Sections

.text
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 319B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ