2172d17a79011fb386dc0f563d683610N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2172d17a79011fb386dc0f563d683610N.exe
Size

181KB
MD5

2172d17a79011fb386dc0f563d683610
SHA1

95e878896193eaecf312df549ae45cc889d0c74b
SHA256

61eacbad98f149ed1e7fb5fa6e6e74fb4440605766efb1257bd419ad62484465
SHA512

f4323216e47385242b59669994c59a000ee13498ef76ba05132a32ea88b222dea7967bc79381700cc3bd86f9053a9165d5c6069b5eba47b527d5a37faa93b385
SSDEEP

3072:mVOVK9crNdChBpaHwHjHDgy5fpjUthLI60ttH8Ra4KvqDUhYJ9f6zfvLsSif:gq5dkpaHwH7kyzjUCttH8Ra7vNQoznLY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2172d17a79011fb386dc0f563d683610N.exe

Files

2172d17a79011fb386dc0f563d683610N.exe
.dll windows:4 windows x86 arch:x86

c59bef6c2a3691b4b6e6254b06590a86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

mfc42

ord5356

msvcrt

strcspn

user32

wsprintfA

advapi32

LookupPrivilegeValueA

ws2_32

socket

shlwapi

PathIsDirectoryA

ole32

CoSetProxyBlanket

oleaut32

SafeArrayUnaccessData

msvcp60

?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z

netapi32

Netbios

Exports

Exports

InputFile
PrintFile
WriteErrorLog

Sections

.text
Size: 160KB - Virtual size: 296KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE