26168b315245fa2d6e68f402388d20c2643803d9c527e10a09d0327f33a1418bN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26168b315245fa2d6e68f402388d20c2643803d9c527e10a09d0327f33a1418bN
Size

6KB
MD5

25a4db0790131764de170d0f47fa9720
SHA1

addb95bf5012cae69fcabc7450be4e0b6f9c9fa6
SHA256

26168b315245fa2d6e68f402388d20c2643803d9c527e10a09d0327f33a1418b
SHA512

2420278255b6594d402bd5472a26aedcffe7ad3e8460a0648956dbfa33167ef1ace9cab97c94f7db42d02940804cab2408fc3451056c96badbeed500603d6492
SSDEEP

96:hy859x0P8MaDpRvk64atF8UiSbbjyIddX0UeA:F5oLYRvcatWUiSbbmIdV0UJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26168b315245fa2d6e68f402388d20c2643803d9c527e10a09d0327f33a1418bN

Files

26168b315245fa2d6e68f402388d20c2643803d9c527e10a09d0327f33a1418bN
.dll windows:5 windows x86 arch:x86

c4c9ecfc26ca516a80b8f6f5b2bdb7e6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryW
GetProcAddress
CreateFileA

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 385B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ