d9ec1b40d22c4f2c71036d8f3d04bc50N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d9ec1b40d22c4f2c71036d8f3d04bc50N
Size

3KB
MD5

d9ec1b40d22c4f2c71036d8f3d04bc50
SHA1

50c2fbc21b68d7da8f580121485ae6fcfe34302d
SHA256

788ae56c4c6a45c93f5b284a87c0415fc5fbad5bf7d42b8a21824818e04be216
SHA512

585edc6c24de1dfc39eef3f01054ea3aa805e4fdfe787a70571e9fcfccf4099ed317e52e0dead0d08426b274415198310858b6eb30d1fb75fb0851ddc3738365

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9ec1b40d22c4f2c71036d8f3d04bc50N

Files

d9ec1b40d22c4f2c71036d8f3d04bc50N
.dll windows:5 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress

Exports

Exports

?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32

Sections

.text
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 319B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ