fbf2901dc9ac10dda4612b946fda3a60N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fbf2901dc9ac10dda4612b946fda3a60N
Size

6KB
MD5

fbf2901dc9ac10dda4612b946fda3a60
SHA1

9a927f3974136101fb873fd21ccb3362a19309f1
SHA256

1935737ca6a4601b741b563a9491b62ae0567cd91eb00dff3812447ce42a1957
SHA512

7d04741718430e6987eb2b899108cde99a07c1a883ccaa596d489ddce2213a5e3bc5fa4dacb4b749723b850f4abaf346a875e3c19c6f0a324939496879759adb
SSDEEP

96:hy859x0P8MaStcT18YO8QYVLcvPSa/dDkcRjQV:F5oLhcT6ZYVLcCgDRRy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbf2901dc9ac10dda4612b946fda3a60N

Files

fbf2901dc9ac10dda4612b946fda3a60N
.dll windows:5 windows x86 arch:x86

c4c9ecfc26ca516a80b8f6f5b2bdb7e6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryW
GetProcAddress
CreateFileA

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 385B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ