f5cdfe6a2eff39fafa4a5b15f2bc1b417a1d84e2d9849020b20bb76c2133b36aN | Triage

Sharing

General

Target

f5cdfe6a2eff39fafa4a5b15f2bc1b417a1d84e2d9849020b20bb76c2133b36aN
Size

5KB
MD5

985b6a3ce7962808ba813069871912c0
SHA1

c4646212a5d232f97eed370605ecb5ee2e7ebec6
SHA256

f5cdfe6a2eff39fafa4a5b15f2bc1b417a1d84e2d9849020b20bb76c2133b36a
SHA512

fec1220793abbf2bffc27dc54d4651f83392c688a7f62e5d400e43ca99cddcebd1cacc1ff384b785c44089cdc1cb797c0170543660c3f074cb445270f479bef3
SSDEEP

96:hy859x0P8MaTO+orFLBZO0zeSNztxX1ioMK:F5oLIw5OGVNztioMK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5cdfe6a2eff39fafa4a5b15f2bc1b417a1d84e2d9849020b20bb76c2133b36aN

Files

f5cdfe6a2eff39fafa4a5b15f2bc1b417a1d84e2d9849020b20bb76c2133b36aN
.dll windows:5 windows x86 arch:x86

c4c9ecfc26ca516a80b8f6f5b2bdb7e6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryW
GetProcAddress
CreateFileA

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 385B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ