21f452c6a766bca5d0c4efa870afcc165cb61aa2647f1be65e82fb05224fb49dN | Triage

Sharing

General

Target

21f452c6a766bca5d0c4efa870afcc165cb61aa2647f1be65e82fb05224fb49dN
Size

6KB
MD5

8c2c8eb5113fefeb9f6236eb69f0ded0
SHA1

962d8f0f1f155305f039e49cc368ddece829a0f3
SHA256

21f452c6a766bca5d0c4efa870afcc165cb61aa2647f1be65e82fb05224fb49d
SHA512

e5e1b06f1dcd3ec8f2c17bdd35423627cc18a271ababd58893b0bbbe1e9c97e74c8889b7d6e82001635f7fb6a01c1f7a6ad9ba0f363dfdf3beacc6123bce9a8a
SSDEEP

96:VGEETrMLH5V5rV6Hmwi+ZbFYJjisWcOr72grs:efMjL6g+ZZYJjNWXr7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21f452c6a766bca5d0c4efa870afcc165cb61aa2647f1be65e82fb05224fb49dN

Files

21f452c6a766bca5d0c4efa870afcc165cb61aa2647f1be65e82fb05224fb49dN
.dll windows:5 windows x86 arch:x86

a23064e36a7cee786955ca6fd65d4af8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryW
ReadFile
CreateFileW
GetProcAddress
VirtualAlloc
MoveFileExW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1024B - Virtual size: 646B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 517B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ