177bff56d190d07a417e7cee8949c500N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

177bff56d190d07a417e7cee8949c500N.exe
Size

4KB
MD5

177bff56d190d07a417e7cee8949c500
SHA1

2cf0f82726c8fb6932c0f1a9048006eac0a4e644
SHA256

403356973d1936fed5832fc148453dbded72525cba55a62cc4bbc81ec6529586
SHA512

7a993ea17c9bc18cd76923840497630b98ebaedfe0acc749e89c1102b3c4d5ee02523ed7807c47cd1f83e7268af7ef1038c4d3fbd754aa63fc106511ac636e19
SSDEEP

48:SKLA9oyTnXz+ihZjuHODNv6HDm88vQurlQdOPrENca+o8u4lrriXjihr:eTnXzvuuJv6jm8UQurWd0rENu5/iehr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
177bff56d190d07a417e7cee8949c500N.exe

Files

177bff56d190d07a417e7cee8949c500N.exe
.dll windows:5 windows x86 arch:x86

e97a70102cce77bfe0dc571cb46a4352

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
VirtualAlloc
ReadFile

user32

MessageBoxA

shell32

ShellExecuteW

msvcrt

_adjust_fdiv
free
_initterm
malloc

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 486B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ