cd7da8e565edbaa7145c1a30d9242970N | Triage

Sharing

General

Target

cd7da8e565edbaa7145c1a30d9242970N
Size

6KB
MD5

cd7da8e565edbaa7145c1a30d9242970
SHA1

da4859e1e6c09b43c499414608af8aabbb4b8ed0
SHA256

0993aaac990146979a0d93738b1aa7a44cd7aa5ab0df007d7fc15ea477b4a658
SHA512

8e2eba2e4e935366d883054503093fd63551fae2b20513959e58f280d4716fc416ab00ce5b9086fc56fe280506331d2cd3175a487e12f5befde67d7f9bf1a591
SSDEEP

96:hy859x0P8MafsbY39kV+NtDLx/4o3z+1F:F5oL+s2Gst3xf+1F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cd7da8e565edbaa7145c1a30d9242970N

Files

cd7da8e565edbaa7145c1a30d9242970N
.dll windows:5 windows x86 arch:x86

c4c9ecfc26ca516a80b8f6f5b2bdb7e6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryW
GetProcAddress
CreateFileA

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 385B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ