54405b003ad9c47d8ea94855f3695f3d0cdd59554c112630b08e94a15574c6c7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

54405b003ad9c47d8ea94855f3695f3d0cdd59554c112630b08e94a15574c6c7
Size

7KB
MD5

92b4fe42ac139f0bdd34bf313f1beabf
SHA1

ef14214acf1f783aef6cb1ed3f38f370d19764a6
SHA256

54405b003ad9c47d8ea94855f3695f3d0cdd59554c112630b08e94a15574c6c7
SHA512

5a7c8e0bc3742b3d8f51b88b786437481c963294da9216e435d63f55647b6d0f6236286b7835dd26926038dea59ead6402b4512a1c0b3a113188bd9ff56e7908
SSDEEP

96:DixZjmjtjd8jPjcZGR5TIqVyt+hEaTsHEXWZGcGhZqLfBaIve6ZUHNGuNTB:unSR6bgYzyb0sHeW/LpaID6t5N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54405b003ad9c47d8ea94855f3695f3d0cdd59554c112630b08e94a15574c6c7

Files

54405b003ad9c47d8ea94855f3695f3d0cdd59554c112630b08e94a15574c6c7
.dll windows:5 windows x86 arch:x86

33eb74cdd77dab1b168bbaa130115a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
LoadLibraryW

user32

PostMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ