eee137f30dad306d1fdc50dbca0b0100dc8c7720ceab7098e81d57836be3e982N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eee137f30dad306d1fdc50dbca0b0100dc8c7720ceab7098e81d57836be3e982N
Size

3KB
MD5

0fcf963a4b78d32420f18e9a508e48b0
SHA1

e41ee72edc2f07cf384d4c048d2ad88b918aea42
SHA256

eee137f30dad306d1fdc50dbca0b0100dc8c7720ceab7098e81d57836be3e982
SHA512

383901d3e40809f8048687d504624a100f7e3b1d2fa37daf5d1b006a90df610cb482db734626f92db5219267d77500702f54ceb721c47c568cbfef8fe853fd49

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eee137f30dad306d1fdc50dbca0b0100dc8c7720ceab7098e81d57836be3e982N

Files

eee137f30dad306d1fdc50dbca0b0100dc8c7720ceab7098e81d57836be3e982N
.dll windows:5 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress

Exports

Exports

?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32

Sections

.text
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 319B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ