cbacaeb803e22efef9027cc72eec6043c3811493eb6e05be39ddd9a419ce3049 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cbacaeb803e22efef9027cc72eec6043c3811493eb6e05be39ddd9a419ce3049
Size

6KB
MD5

f74e46d596b76aaafcfc86ed39f3553a
SHA1

c1acb90df52e58bfb3c9a3778a10a0b6afed9b8b
SHA256

cbacaeb803e22efef9027cc72eec6043c3811493eb6e05be39ddd9a419ce3049
SHA512

7a948e867936d4c4494f76753b7241d156aba6ac597dc0c84617376a6c7a3b0ea7c3ec6f48496b68c24601fe8f04767ff602b3fd9efaa0463f305fd3904d1fc6
SSDEEP

96:DixZjmjtjd8jPjcZGR5TIxLCZOKz4YBzDnnw06+VwvQFCsxs6YuFE:unSR6bgYavXOzbwX+McYuFE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cbacaeb803e22efef9027cc72eec6043c3811493eb6e05be39ddd9a419ce3049

Files

cbacaeb803e22efef9027cc72eec6043c3811493eb6e05be39ddd9a419ce3049
.dll windows:5 windows x86 arch:x86

33eb74cdd77dab1b168bbaa130115a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
LoadLibraryW

user32

PostMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ