17e1e8bf3805d0fec1a38233bd47a33c | Triage

Sharing

General

Target

17e1e8bf3805d0fec1a38233bd47a33c
Size

16KB
MD5

17e1e8bf3805d0fec1a38233bd47a33c
SHA1

dd323bbb374bf1f06c1969cb87ef3d58ef471f18
SHA256

e0902a11236d21237b34868ddbbbbe8b23e4cc389db0087d45056b542135ad1b
SHA512

a76f3d8f9ebb54d2c7cc964c47f9e48674bffc4f9fe1403125c6a4759c89ab9e258b7615696ecd80cf0c061ba2cf7e0439171f356423bc47f6d2e5530bb7173b
SSDEEP

192:A84EoNQ/A+w2yq+hRgfOWBgZrKx5xPZ88vA8sED:DFo0Wh3mOeg5KvxPZ8YeED

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17e1e8bf3805d0fec1a38233bd47a33c

Files

17e1e8bf3805d0fec1a38233bd47a33c
.dll windows:4 windows x86 arch:x86

9f91d28e63eef4c72c010f250bce2ea9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddAtomA
Beep
CreateThread
DisableThreadLibraryCalls
FindAtomA
GetAtomNameA
GetModuleHandleA
Sleep
VirtualProtect

msvcrt

__dllonexit
_errno
_iob
abort
fflush
fprintf
free
malloc
memcpy
system

user32

GetAsyncKeyState
MessageBeep
MessageBoxA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 224B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ