29377353fc9a8d5c8aac1c252f4edff0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29377353fc9a8d5c8aac1c252f4edff0N.exe
Size

3KB
MD5

29377353fc9a8d5c8aac1c252f4edff0
SHA1

def05dd17393fe7e5070154b58ae9a9f2ffb0c08
SHA256

90f512cd824d83b0ea7631b2b8aa0a955d0247bc0c1e4fea9841cefa0dec479b
SHA512

f92b1d8ae00a5cb7f8e1f5dbebb7c0e157d50f1b6f78a36183cb73a5f9a694b4c3251a54144bf5394c0ce75a61ab3b8cab5bc0762d7c12147a7251268e82d98d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29377353fc9a8d5c8aac1c252f4edff0N.exe

Files

29377353fc9a8d5c8aac1c252f4edff0N.exe
.dll windows:5 windows x86 arch:x86

e97a70102cce77bfe0dc571cb46a4352

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
VirtualAlloc
ReadFile

user32

MessageBoxA

shell32

ShellExecuteW

msvcrt

_adjust_fdiv
free
_initterm
malloc

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ