a1146f881adc204d3ffb882bf3e7893334cc6a8ed3c5f54296bd96f4a1aa23ad | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1146f881adc204d3ffb882bf3e7893334cc6a8ed3c5f54296bd96f4a1aa23ad
Size

7KB
MD5

eb5a9aac44eeb79c05d018920a309343
SHA1

564f961a90523bcc674e71b6fce89ef2a8c58ccc
SHA256

a1146f881adc204d3ffb882bf3e7893334cc6a8ed3c5f54296bd96f4a1aa23ad
SHA512

801862b455d8be3f6a30d328d89c3a0e51af3b4cd711ef3d09af4040c3e69e7429f63c4489453afa0bf2321ad68f3fe721f071c990c94fa6034d5c8424d0a71a
SSDEEP

96:DixZjmjtjd8jPjcZGR5TIUsBcrla3LciIfKGGSqfjhSnuMDVvHtf/mXcCLWu4hMh:unSR6bgYKB8gfWEoDVvtnmMCCu4hi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1146f881adc204d3ffb882bf3e7893334cc6a8ed3c5f54296bd96f4a1aa23ad

Files

a1146f881adc204d3ffb882bf3e7893334cc6a8ed3c5f54296bd96f4a1aa23ad
.dll windows:5 windows x86 arch:x86

33eb74cdd77dab1b168bbaa130115a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
LoadLibraryW

user32

PostMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ