17e23b8ead019d1af65d257199de2b61686de418604d79f9d5949e31d6dc416a | Triage

Sharing

General

Target

17e23b8ead019d1af65d257199de2b61686de418604d79f9d5949e31d6dc416a
Size

6KB
MD5

20defc9221aaa77bb810964b1fd1770a
SHA1

ebd99d0f13438e1f8153076f0282485e42d1f830
SHA256

17e23b8ead019d1af65d257199de2b61686de418604d79f9d5949e31d6dc416a
SHA512

c72e4d3310863ee772d81a1bd94cfc7b875834f838f0c68210c6c1f50b40fff187a7abd7eb92fa249c30d51f7757860058103bacc7503c674edef13a1bbd55d3
SSDEEP

96:ytH2X7QmMRfEtrV4J+O+3Tr5FCq0qkor:E2Xk8E+O+/Kor

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17e23b8ead019d1af65d257199de2b61686de418604d79f9d5949e31d6dc416a

Files

17e23b8ead019d1af65d257199de2b61686de418604d79f9d5949e31d6dc416a
.exe windows:4 windows x64

b63752f8ef055998d30400895fc163d3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LocalAlloc
GetSystemTime
Sleep
ExpandEnvironmentStringsA

msvcrt

memmove
printf
system
_vsnprintf
__set_app_type
_controlfp
__argc
__argv
_environ
__getmainargs
exit

urlmon

URLDownloadToFileA

snmpapi

SnmpUtilOctetsFree
SnmpUtilOidCpy
SnmpUtilVarBindCpy
SnmpUtilOidFree
SnmpUtilPrintOid
SnmpUtilPrintAsnAny
SnmpUtilMemFree
SnmpSvcGetUptime
SnmpUtilVarBindFree
SnmpUtilOidNCmp
SnmpUtilOidToA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ