41e0b0556fb3c1f96ad44ab871b6ac00N | Triage

Sharing

General

Target

41e0b0556fb3c1f96ad44ab871b6ac00N
Size

6KB
MD5

41e0b0556fb3c1f96ad44ab871b6ac00
SHA1

44a421a1489d2b1b4602405ec706487bff2ceaa7
SHA256

a7b7436101f6129476cc847aed4ae8d59a9b4ee0066a4e558d294dc7a18e4ebc
SHA512

5ca9d18aa93de3defd9feb86e57b60a697dfe4f9a44c0ad93c884cf8b5fd94a10cf1c5df365706d233ec4ca2cbdbfcc56f3f2820ea2c38f1fb0295ef0fb79efe
SSDEEP

192:EHRh1eppoMlRNi2fEwHgjLfDEzonGpvJ:EHROpljiPUgvfDfGpv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41e0b0556fb3c1f96ad44ab871b6ac00N

Files

41e0b0556fb3c1f96ad44ab871b6ac00N
.dll windows:5 windows x86 arch:x86

76812f441b0ed9d3cc0748af25d689a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
VirtualAlloc
LoadLibraryW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 423B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ