a160b77d77017cc06f4aab8fcc2fdc20N[.]exe | Triage

Sharing

General

Target

a160b77d77017cc06f4aab8fcc2fdc20N.exe
Size

184KB
MD5

a160b77d77017cc06f4aab8fcc2fdc20
SHA1

0bdcd9b6fea10563a54154688c83c0796cbe6d1c
SHA256

35f42905f801245c1a1a6eaae29fac5a0129c9c0cfd4cd19a0aba5854bd11dcf
SHA512

9ac357f2e1115c027bcc833033fa4bf016235b03e74383d5284d5ff28fe05d35850850ef4d47f110b2cfa84ad2817f39f4070dccbd69e2d814693409a77e97fd
SSDEEP

3072:QW8WgWhVnmr6k/6zsRJLNqTXvMU9tb+/HU6ngmuWx9ixCH0u:78qh+66QsRdNiBW/06ngmuWexC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a160b77d77017cc06f4aab8fcc2fdc20N.exe

Files

a160b77d77017cc06f4aab8fcc2fdc20N.exe
.dll windows:5 windows x86 arch:x86

eacc1eddf059a6097fd8d34c586d3907

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

RegOverridePredefKey
RegisterEventSourceW

user32

ShowOwnedPopups

msvcrt

memset

oleaut32

VarBstrFromDec

gdi32

GetFontData

kernel32

GetModuleHandleW
LoadLibraryExA
GetModuleFileNameA

Exports

Exports

FWroeeWqoinnmw

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 124KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ