8977b959f807ef95094421370a507f80N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8977b959f807ef95094421370a507f80N.exe
Size

234KB
MD5

8977b959f807ef95094421370a507f80
SHA1

9df5d286d5952456b3af6163b1e8d1a7a6d7faba
SHA256

985ac7447835791d1dd302e90dae622ad32a629d2fa3f26381a0eef205aebe12
SHA512

f9e70062a9149472690ad0631ed5e7b7dec3ce3096e5dff91d0214b71cffb956ab8c91fc5906d780ed2dfb7c346a9beb1e81dafe8135cc8da3482eb3a12ea364
SSDEEP

6144:mvEUaoUBS11KJ1edxk71+cNT3QF3e0VvKKQouMhp:mv3a5edxCvT6hvQoue

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8977b959f807ef95094421370a507f80N.exe

Files

8977b959f807ef95094421370a507f80N.exe
.exe windows:5 windows x86 arch:x86

3c6e5793e514214727b5614fbe758755

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
CreateFileW
GetFileSize
ReadFile
CloseHandle
VirtualAlloc
GetModuleHandleA
GetProcAddress
VirtualFree
GetProcessHeap
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 229KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE