2017[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2017.exe
Size

176KB
MD5

23a9b7f1ee5a4efd67ccf7ca8f84e0be
SHA1

9eec8e527321c1d7765af6eb399f18bcc201f071
SHA256

30c3459643fbfb3c4c8938d404b439295e8f98edf95c8db9c3fde4b74295f14f
SHA512

670db3a2d15469e41cbad65e4f342c6819fc022aa68353efa7324d6840a2c38d965bc339a23e05e4dc74088430884a0ff1303f2b63f1b8bff56a41feeb0e15b1
SSDEEP

1536:fLuSuBPnILncPfiX/nmOMZhtnm9KhGyWMCUzXgj8hI/ZKDeKo/QN8Yn:fLLuBneGf+PpYnm9nqCUb5iYDetqNn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2017.exe

Files

2017.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 164KB - Virtual size: 162KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ