90021ed813d496169656cb955e4f2d7f0e412e80c64c7c302a5c02eae6d28e63 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

90021ed813d496169656cb955e4f2d7f0e412e80c64c7c302a5c02eae6d28e63
Size

6KB
MD5

6223e812e55a94f4096d8397c1149345
SHA1

dc7581a8ae440769ff65e90b34326c79ed48f164
SHA256

90021ed813d496169656cb955e4f2d7f0e412e80c64c7c302a5c02eae6d28e63
SHA512

057d61954fb6de5037224303f888ebd356ec918f5a4097c52d4c4b65605190a4af027db7b059e5cb30a85fd833608cbdee9a056cfcb107433115f1d6e4f244a6
SSDEEP

96:DixZjmjtjd8jPjcZGR5TIzT0LZgq5s36ZMjMEvxSD:unSR6bgYUTwPgosc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
90021ed813d496169656cb955e4f2d7f0e412e80c64c7c302a5c02eae6d28e63

Files

90021ed813d496169656cb955e4f2d7f0e412e80c64c7c302a5c02eae6d28e63
.dll windows:5 windows x86 arch:x86

33eb74cdd77dab1b168bbaa130115a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
LoadLibraryW

user32

PostMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ