28329375923b40ab88a95028d5a9af512285f4af2a74534b1bee4973bcc6f332N | Triage

Sharing

General

Target

28329375923b40ab88a95028d5a9af512285f4af2a74534b1bee4973bcc6f332N
Size

6KB
MD5

7cb466806d8a606572ebe6722f5ff9f0
SHA1

701ed358f44b7acb7a718a20d1ffaa5d77d4683e
SHA256

28329375923b40ab88a95028d5a9af512285f4af2a74534b1bee4973bcc6f332
SHA512

3650e067deb873bed178e84a26c9bedc416895a27e894cc3c07c8d338afd8eeb580d6d204c8e942843986006466f1415975c88602e38f213a86a42735ea23019
SSDEEP

96:DixZjmjtjd8jPjcZGR5TIEW4br1EObi9j3ectl9lA3XBaY/I:unSR6bgYpW8r1EObgTlTAnBa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28329375923b40ab88a95028d5a9af512285f4af2a74534b1bee4973bcc6f332N

Files

28329375923b40ab88a95028d5a9af512285f4af2a74534b1bee4973bcc6f332N
.dll windows:5 windows x86 arch:x86

33eb74cdd77dab1b168bbaa130115a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
LoadLibraryW

user32

PostMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ