d5fe917231bd1edca0b53c369d829cc0N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5fe917231bd1edca0b53c369d829cc0N
Size

7KB
MD5

d5fe917231bd1edca0b53c369d829cc0
SHA1

1f5628abd1ef93d7e1bca3a622d1a5b60f0e05b6
SHA256

0fe510893192cb998c72f39ce5a4af01680fa34ae24df1a349a39683dc8c8f7a
SHA512

4558128b4b6a3074a08253c2e8308b757e55ede597dfa922241f1d2c1a430d4e4d20eaaf1520c53289b096ce32545a518d9da2aca407dba7799f68b12dce4e0c
SSDEEP

96:DixZjmjtjd8jPjcZGR5TIXnMDgPYtx94o0TUS0loiZOImGCnsj:unSR6bgYzMYtx94/foqW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5fe917231bd1edca0b53c369d829cc0N

Files

d5fe917231bd1edca0b53c369d829cc0N
.dll windows:5 windows x86 arch:x86

33eb74cdd77dab1b168bbaa130115a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
LoadLibraryW

user32

PostMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ