6a102d446812c1380b89e1f56aabb2709dc80b1fa7dbe95dd012106a280862fa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a102d446812c1380b89e1f56aabb2709dc80b1fa7dbe95dd012106a280862fa
Size

6KB
MD5

b74aad8bb710367e7289080abd788993
SHA1

399bad76d51751811912c7d8840bde212f668cf0
SHA256

6a102d446812c1380b89e1f56aabb2709dc80b1fa7dbe95dd012106a280862fa
SHA512

711323327d1f1927830230dbc1034cef84bf626c56e3b4c797d50d4a3eac98c363d023b0f7ba5da293bdcae4bbf1f250c31a8bd521ee401a6f567ce4c847027d
SSDEEP

96:hy859x0P8MahKk/6CEVGIVn9q/6mAVh6mr7n/o9nSPw/cU:F5oL0h6pvn9CM//7nw56rU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a102d446812c1380b89e1f56aabb2709dc80b1fa7dbe95dd012106a280862fa

Files

6a102d446812c1380b89e1f56aabb2709dc80b1fa7dbe95dd012106a280862fa
.dll windows:5 windows x86 arch:x86

c4c9ecfc26ca516a80b8f6f5b2bdb7e6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryW
GetProcAddress
CreateFileA

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 385B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ