4cfe19a3dbe65aae3be918ce5cd35dfe17d62a47fd7a397d021239238dc97899N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4cfe19a3dbe65aae3be918ce5cd35dfe17d62a47fd7a397d021239238dc97899N
Size

3KB
MD5

7642b1d4526fbb149c94621064fd8230
SHA1

a7d55b2dc6cc5cb6084d156b28a755f4e8d02b50
SHA256

4cfe19a3dbe65aae3be918ce5cd35dfe17d62a47fd7a397d021239238dc97899
SHA512

c655dfd442af69460b25b37e5dc3c38ac3d45f2d6ca7eb2ab48aaff347e4d14d67bd4e4b81c3ffd85a7f855fa43907b79d1013789e383ecaec268476e08ba001

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4cfe19a3dbe65aae3be918ce5cd35dfe17d62a47fd7a397d021239238dc97899N

Files

4cfe19a3dbe65aae3be918ce5cd35dfe17d62a47fd7a397d021239238dc97899N
.dll windows:5 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress

Exports

Exports

?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32

Sections

.text
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 319B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ