273540132238c9a196b86d8fe49727d0N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

273540132238c9a196b86d8fe49727d0N
Size

6KB
MD5

273540132238c9a196b86d8fe49727d0
SHA1

eb3e90cb21461635630f92eaffda614a27e292db
SHA256

19f26a5a97594efadf86d38940c4c279a1536c1ece6e7d915e40bdf490b4e5f3
SHA512

2fe7b2dbdb70728cbc7284996557329aea138cbe70488b9279b9d2fa15ba97a3facc62e53a125838f267f6111e281eadd60a8f7bfd2e7afd57840f3e6826af96
SSDEEP

96:DixZjmjtjd8jPjcZGR5TI0B2FDh+5PnaMpOoMkBz7NWoSN:unSR6bgYdcl+3QQ5W1N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
273540132238c9a196b86d8fe49727d0N

Files

273540132238c9a196b86d8fe49727d0N
.dll windows:5 windows x86 arch:x86

33eb74cdd77dab1b168bbaa130115a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
LoadLibraryW

user32

PostMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ