a1ee26f440fb275d13940d4a364b6eaa04c9954cac40ef32e2c5be782b7511a1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1ee26f440fb275d13940d4a364b6eaa04c9954cac40ef32e2c5be782b7511a1
Size

6KB
MD5

c2b890941f8a8623cf35487abd0bc7cf
SHA1

a45afd7c8fe396cc7b7a0a2525ca1fb85ba6a74a
SHA256

a1ee26f440fb275d13940d4a364b6eaa04c9954cac40ef32e2c5be782b7511a1
SHA512

0e62536aa3476a9cc77acac45c6cd49c515e6ad11d9c34a5b9ac187e4c1a83a4377ec6e0bc2c1fd2c472c6dda21549f03a66a57898f7ae9fdc9b01f666c1ddf5
SSDEEP

96:DixZjmjtjd8jPjcZGR5TIFV+yTN5iuFRtS5oNnN2ug8bb4wUX:unSR6bgYQV/z1FrBnNxgSjU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1ee26f440fb275d13940d4a364b6eaa04c9954cac40ef32e2c5be782b7511a1

Files

a1ee26f440fb275d13940d4a364b6eaa04c9954cac40ef32e2c5be782b7511a1
.dll windows:5 windows x86 arch:x86

33eb74cdd77dab1b168bbaa130115a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
LoadLibraryW

user32

PostMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ