177c5d1a04b91215b0a5c6a3bd43df17 | Triage

Sharing

General

Target

177c5d1a04b91215b0a5c6a3bd43df17
Size

20KB
MD5

177c5d1a04b91215b0a5c6a3bd43df17
SHA1

96137b0378add89611ccdaadb26dd6aaa982c9d8
SHA256

3e85fb7fdc31f476d2bcb25523991b1088fa703535af6575627bbf832b872637
SHA512

e0bc36e5804b1d728f35884d621aaaf6addc311306405a48f5da1be00a4cf610c123f1dd4238e66ecd3eb311f5c4a0f2da91dca32ca32e7093291812ce8d9348
SSDEEP

384:Ocpx0F38KOqps0W2Y1a6btgpu7NOdmoxcnvy:r61+pvtgsEdhxcn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
177c5d1a04b91215b0a5c6a3bd43df17

Files

177c5d1a04b91215b0a5c6a3bd43df17
.dll windows:4 windows x86 arch:x86

660399029509fe05369fb1ee1db465b8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
CloseHandle
VirtualFree
CreateFileA
VirtualProtect
VirtualAlloc
ExitProcess

user32

DialogBoxParamA
LoadIconA

gdi32

AbortDoc

advapi32

RegQueryValueA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 462B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ