e6e73f8e44a018ec9c29bc2770e36550N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e6e73f8e44a018ec9c29bc2770e36550N.exe
Size

4KB
MD5

e6e73f8e44a018ec9c29bc2770e36550
SHA1

c6d7d605168216d98c1c5e1b6f3ce2a52f164621
SHA256

54280a48c11a90ca3561a5e7e230c8c7c545b3ca7acd405eb78ffcd70a4d9a07
SHA512

dae7fc6a1ff53d146dce24898752e4c076dbe7ab1b2b65afd7d0ed74d69d75c046a16ccbb38e028bb1eb994724637d175daafaf2a95b989d5e8a803e95b34d02
SSDEEP

24:e1GSYTe3Cee/0I/kPVCRVtc44MnXz+iM2u8kypgyXwVQwA3H4tROjHOjbtxqq7tP:SWkO0IoyTnXz+ihZjokqlD/g6V6FU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e6e73f8e44a018ec9c29bc2770e36550N.exe

Files

e6e73f8e44a018ec9c29bc2770e36550N.exe
.dll windows:5 windows x86 arch:x86

e97a70102cce77bfe0dc571cb46a4352

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
VirtualAlloc
ReadFile

user32

MessageBoxA

shell32

ShellExecuteW

msvcrt

_adjust_fdiv
free
_initterm
malloc

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ