17[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17.exe
Size

20KB
MD5

b858b081de7efe7b162c4ed2f23f2184
SHA1

0194ee7595989a7bec646ad51591df4591e2c9b8
SHA256

b522ef5d10c2db09539159f7b7024e9490d9695b159b6d3ff0ce54dd31ff8095
SHA512

28da6437d6c561bfb25845c72eaac47f48d17fa2d4ab157b6fae0baa16d7ccf67d2c387d6e7675206e90ad3fd5061258f040ff73a89976f447eac66e2499394a
SSDEEP

96:DKEUgQKIIpii45waIe7xChIKaSGYFecEJOA:W1XeL4PIexGD5FeP7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17.exe

Files

17.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ