80d6374e74aac31917b0402f78d2918d9eff4f11b69e3f904591f4c2a5e87c4cN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

80d6374e74aac31917b0402f78d2918d9eff4f11b69e3f904591f4c2a5e87c4cN
Size

6KB
MD5

23dfa48c8a677c35b6c8045d6a3c53b0
SHA1

1db99d5deab23f12640f7d4a8b429232db109e6d
SHA256

80d6374e74aac31917b0402f78d2918d9eff4f11b69e3f904591f4c2a5e87c4c
SHA512

a55c54b9e37a15e87cd1d9e23e8a6cf2d15db08b0e5e668b408b23a67c4e384915c5a9b1afdc50047f8aefd819ba32918cd53b6b53d4dd56fbec8078fa6e1345
SSDEEP

48:C6VonAHso6U7lYa92RrpjwDmetlG95hx+iMHhePEbIx/CbsKlSpUHVvp7R1bWBlZ:nEY2RrF1eqwi46x/CbsK6UlyLMMWzD8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
80d6374e74aac31917b0402f78d2918d9eff4f11b69e3f904591f4c2a5e87c4cN

Files

80d6374e74aac31917b0402f78d2918d9eff4f11b69e3f904591f4c2a5e87c4cN
.dll windows:5 windows x86 arch:x86

76812f441b0ed9d3cc0748af25d689a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
VirtualAlloc
LoadLibraryW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 423B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ