41ebd0783aa5aed2bbb74d316b9fa0ef1c4a98379b5658ccf390892ab5b1d04dN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41ebd0783aa5aed2bbb74d316b9fa0ef1c4a98379b5658ccf390892ab5b1d04dN
Size

6KB
MD5

0ea66451cee858f88440ee234b222730
SHA1

caae828ec1815a2f53248e4270d18be444563d18
SHA256

41ebd0783aa5aed2bbb74d316b9fa0ef1c4a98379b5658ccf390892ab5b1d04d
SHA512

a9318d849d5e05d0b9f72d3005d2ebf527dce2d6bc764f7562d2cf552ff2064a74dd4aa8667d933f379f79729266f40d54db273c9d15b12412d3d55005aea9a9
SSDEEP

96:nEY2RrF1eqwi4bH5fAUUvYXDA6DZ94D6LXorlawioAcYYkoo83edbwkTBgER9GJm:EHRh1epprBN7brZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41ebd0783aa5aed2bbb74d316b9fa0ef1c4a98379b5658ccf390892ab5b1d04dN

Files

41ebd0783aa5aed2bbb74d316b9fa0ef1c4a98379b5658ccf390892ab5b1d04dN
.dll windows:5 windows x86 arch:x86

76812f441b0ed9d3cc0748af25d689a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
VirtualAlloc
LoadLibraryW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 423B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ