d14b21803c7d3a786cd2de27a703f560N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d14b21803c7d3a786cd2de27a703f560N.exe
Size

3KB
MD5

d14b21803c7d3a786cd2de27a703f560
SHA1

128f8cfd5849fdf1d0ca14f215966405cb372c09
SHA256

7eb8a12a28484a6ba644c6afa80d759c1dbad83afc92bb07658d51c0c5ea5ece
SHA512

253899020c37e22e7c2b3cc80a9d6b4c3f1ae4da2ed03d4f2e4787c3981629cab074ac5022dc59888113498e9b7d3926fd743dd301cd3fe978814a77decbbc08

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d14b21803c7d3a786cd2de27a703f560N.exe

Files

d14b21803c7d3a786cd2de27a703f560N.exe
.dll windows:5 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress

Exports

Exports

?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32

Sections

.text
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 319B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ