64093604ab115470d37148030e7adda0fcebe89034f47672dc38c83f78f341f5N | Triage

Sharing

General

Target

64093604ab115470d37148030e7adda0fcebe89034f47672dc38c83f78f341f5N
Size

3KB
MD5

fe511621a0d42e023df50b9731d22990
SHA1

3ad2226084f3c836b504fb958ed96fcaeb3e7cae
SHA256

64093604ab115470d37148030e7adda0fcebe89034f47672dc38c83f78f341f5
SHA512

359eef215bedd113b904e98b1b74a9146b3f36257089dd364abf31436a213bd22a1682e1f0a451cd8635c316af774b7eea7f4b52d22c9ed502ee15b969edfeb3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64093604ab115470d37148030e7adda0fcebe89034f47672dc38c83f78f341f5N

Files

64093604ab115470d37148030e7adda0fcebe89034f47672dc38c83f78f341f5N
.dll windows:5 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress

Exports

Exports

?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32

Sections

.text
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 319B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ