b04f254785938ddb90b6bdc30e8aa9148e62f4018cb4bde59a0f9d265cfed5b2N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b04f254785938ddb90b6bdc30e8aa9148e62f4018cb4bde59a0f9d265cfed5b2N
Size

6KB
MD5

d2c96bab472b7714f872bdf00cee9d10
SHA1

6c6c1b95e2858ea75d0be5b6fc4db2155c4bd7a2
SHA256

b04f254785938ddb90b6bdc30e8aa9148e62f4018cb4bde59a0f9d265cfed5b2
SHA512

c5be5824d453691628b13b601a49bd2db97ed2361e5fff611f940a79586a406bbc2e8597fb04703c386b6cbeef5b70974707215aa875500003a8b8d30391b4fe
SSDEEP

96:DixZjmjtjd8jPjcZGR5TIOa24DAEqj/1CPTSbRcxaZjfrKi:unSR6bgYJL4UEqw7icIZL9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b04f254785938ddb90b6bdc30e8aa9148e62f4018cb4bde59a0f9d265cfed5b2N

Files

b04f254785938ddb90b6bdc30e8aa9148e62f4018cb4bde59a0f9d265cfed5b2N
.dll windows:5 windows x86 arch:x86

33eb74cdd77dab1b168bbaa130115a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
LoadLibraryW

user32

PostMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ