45e6bd57971eab26d4e996d256fbf80cc3e1c843beb6ace8d40625759c2c7bdcN | Triage

Sharing

General

Target

45e6bd57971eab26d4e996d256fbf80cc3e1c843beb6ace8d40625759c2c7bdcN
Size

7KB
MD5

3d476dae549f9d8b47709c562f238d40
SHA1

f73174a9071a081a3cd2c3d76c3bcb3e55bd4ff8
SHA256

45e6bd57971eab26d4e996d256fbf80cc3e1c843beb6ace8d40625759c2c7bdc
SHA512

3accfb9d035b28685e687a759602feb068e6af9d4f09e82320c03dc241bebfe0e226d89cd6ada06db75d74ac7ce5937deb89983f2c712d472392deb146fc402e
SSDEEP

96:DixZjmjtjd8jPjcZGR5TIx+G7PGr/Zjv9yx6pNXa3kCRdklyQ:unSR6bgYjGS506vXQdc9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45e6bd57971eab26d4e996d256fbf80cc3e1c843beb6ace8d40625759c2c7bdcN

Files

45e6bd57971eab26d4e996d256fbf80cc3e1c843beb6ace8d40625759c2c7bdcN
.dll windows:5 windows x86 arch:x86

33eb74cdd77dab1b168bbaa130115a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
LoadLibraryW

user32

PostMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ