b7f44949440ba9cf1c89d9156de42990N | Triage

Sharing

General

Target

b7f44949440ba9cf1c89d9156de42990N
Size

5KB
MD5

b7f44949440ba9cf1c89d9156de42990
SHA1

d96385af6b3e60abfbeeb9dab2f555c86f140ae2
SHA256

a968e6abe0f4887f09fa80bbd19e25072047a36328086662fffb5b3a4fa36f7f
SHA512

1c51d1074ec590a1cbab40abc355fdb13aa3a8e30c23c10de9cf7bf346d59d344bc19fdcd39f5d2c7879281f3a0271d45c3a2ceb0d31a4ff6daa1925adf8e978
SSDEEP

96:hy859x0P8MaAIgX7akR/92TzOflKPOPCl2Lc:F5oLEgXWkRAKflKP72L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7f44949440ba9cf1c89d9156de42990N

Files

b7f44949440ba9cf1c89d9156de42990N
.dll windows:5 windows x86 arch:x86

c4c9ecfc26ca516a80b8f6f5b2bdb7e6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryW
GetProcAddress
CreateFileA

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 385B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ