17b1aa7ee77a233ab9506f80ed9170c5f83bdfea726fcc64052c0d40b8942a4c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17b1aa7ee77a233ab9506f80ed9170c5f83bdfea726fcc64052c0d40b8942a4c
Size

666KB
MD5

a360a7e0055b2b6c51b4f91beb53d34b
SHA1

9479a5872b1f6080756c3d9804f4dc89dcf9a30c
SHA256

17b1aa7ee77a233ab9506f80ed9170c5f83bdfea726fcc64052c0d40b8942a4c
SHA512

792d9f5b54772ea8c2b300bce7797b702686ff2d48bed248668f9420e1950719454e3963d4e907bee4228a6b4bbaa5bb2b2b6d3cd4d36fd6174941fcf0faca08
SSDEEP

12288:kxnddPHQLWdkOweRSv+GHtRtw0qu0Ifn2AUJJRiK+mYOWjzLTDUkXRl1+1z:kxnPoLqnweRS2qtRtmzIfn21JJRQmlW0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17b1aa7ee77a233ab9506f80ed9170c5f83bdfea726fcc64052c0d40b8942a4c

Files

17b1aa7ee77a233ab9506f80ed9170c5f83bdfea726fcc64052c0d40b8942a4c
.exe windows x86

64cb0ecbb2fb6382785c9c6f9d84bd07

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

shlwapi

StrCmpNA

user32

SetParent

gdi32

CreateRectRgn

comdlg32

GetOpenFileNameA

winspool.drv

OpenPrinterA

advapi32

RegCreateKeyExA

shell32

ShellExecuteA

comctl32

ImageList_Draw

oledlg

ord8

ole32

CoTaskMemAlloc

olepro32

ord253

oleaut32

VariantClear

Sections

.text
Size: 653KB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE