b6b42d59ca7362956f670a74ba6a9f8f9e9da92a0d122b51f93e8cf86baf4931 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6b42d59ca7362956f670a74ba6a9f8f9e9da92a0d122b51f93e8cf86baf4931
Size

6KB
MD5

3a8d5c96a6b748a176de3fd94bd33e98
SHA1

189b3bf0d70a95872999b378bd68b4f3b155e8f0
SHA256

b6b42d59ca7362956f670a74ba6a9f8f9e9da92a0d122b51f93e8cf86baf4931
SHA512

3fa6778e0a9e4cff75186ea6a061c3a92e6203743d3424f09f324075d7d3364a25ee334bf67a8657a021c71dfb97d82389f80ae75dfc40ca435948fdf347701b
SSDEEP

96:hy859x0P8MaXvF/DTfAe4IsEAAv/ogqHk7T/YYu5UE:F5oLU9/D75AAHogrT/YYuGE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6b42d59ca7362956f670a74ba6a9f8f9e9da92a0d122b51f93e8cf86baf4931

Files

b6b42d59ca7362956f670a74ba6a9f8f9e9da92a0d122b51f93e8cf86baf4931
.dll windows:5 windows x86 arch:x86

c4c9ecfc26ca516a80b8f6f5b2bdb7e6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryW
GetProcAddress
CreateFileA

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 385B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ