4de12fd56b6992797feb15f7e0a0870f0d23596af385fc81e6be7e11c062882eN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4de12fd56b6992797feb15f7e0a0870f0d23596af385fc81e6be7e11c062882eN
Size

6KB
MD5

71cd432adca90b1d9f3ddfcab37ae190
SHA1

9a29c72dd8aca98f4a06fa0bde62c875ec77cd63
SHA256

4de12fd56b6992797feb15f7e0a0870f0d23596af385fc81e6be7e11c062882e
SHA512

5c15f4e81ad1acdf70db1589a242b2b1cf387a2d82c6bddd419f0ed1d90feacbc900b5a85ec614aa9e77ec3dc005ca1e1c333d55e72fc1f51281cd72c74065c9
SSDEEP

96:DixZjmjtjd8jPjcZGR5TI9VphHe6Z03Shq0KEXG+ix7U:unSR6bgYk3h+6uaq0Xyx7U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4de12fd56b6992797feb15f7e0a0870f0d23596af385fc81e6be7e11c062882eN

Files

4de12fd56b6992797feb15f7e0a0870f0d23596af385fc81e6be7e11c062882eN
.dll windows:5 windows x86 arch:x86

33eb74cdd77dab1b168bbaa130115a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
LoadLibraryW

user32

PostMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ