17e2cdb8df517628bce5adc63f694ad4

Sharing

Copy URL Twitter E-mail

General

Target

17e2cdb8df517628bce5adc63f694ad4
Size

321KB
MD5

17e2cdb8df517628bce5adc63f694ad4
SHA1

bcd89d3cbabbe9494f46297b97737ca72798aa6a
SHA256

f0185edd801e7a2bf471773cf43bb1857e3a4bc76afe4df4fa19bc5b8ba26419
SHA512

46a15e761fa61125f408eac8a1af93758477bf4a0e9ed9c431ae4ac13d93ce05e6b50c5f5a378c83ae5ef0980cb51e8f449f67a0702cbae5729edfd09fce8e1f
SSDEEP

6144:MqMjYt3z7rtNr4TpFCZbJzHbGFtOjZHg0IhbYvfXVlhrAiPBmPB:MqM8tD7rtNICbbSFkFSbEXNkis

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17e2cdb8df517628bce5adc63f694ad4

Files

17e2cdb8df517628bce5adc63f694ad4
.dll windows:4 windows x86 arch:x86

80ad03e58127a213d7daed04f9db0449

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetCommandLineA
ExitThread
LoadLibraryA
GetLastError
GetModuleHandleA
LoadLibraryExA
lstrlenA
VirtualAlloc
LocalAlloc
IsBadHugeReadPtr
GetVersionExA
GetProcAddress
GetCommandLineW
ExitProcess
IsBadReadPtr

gdi32

CreateBitmap
GetDIBColorTable
GetDIBits
CopyEnhMetaFileA
GetClipBox
BitBlt
RestoreDC
GetObjectA
GetBitmapBits

user32

SetRect
SetScrollPos
SetScrollInfo

version

GetFileVersionInfoA

Sections

CODE
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 199KB - Virtual size: 199KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RSRC1
Size: 1KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RSRC5
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RSRC6
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RSRC9
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RSRC2
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RSRC8
Size: 1024B - Virtual size: 727B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 644B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

80ad03e58127a213d7daed04f9db0449

Headers

File Characteristics

Imports

kernel32

gdi32

user32

version

Sections

CODE Size: 104KB - Virtual size: 103KB

.data Size: 199KB - Virtual size: 199KB

RSRC1 Size: 1KB - Virtual size: 73KB

RSRC5 Size: 1KB - Virtual size: 1KB

RSRC6 Size: 2KB - Virtual size: 1KB

RSRC9 Size: 2KB - Virtual size: 1KB

RSRC2 Size: 1024B - Virtual size: 566B

RSRC8 Size: 1024B - Virtual size: 727B

.rsrc Size: 6KB - Virtual size: 6KB

.reloc Size: 1024B - Virtual size: 644B

CODE
Size: 104KB - Virtual size: 103KB

.data
Size: 199KB - Virtual size: 199KB

RSRC1
Size: 1KB - Virtual size: 73KB

RSRC5
Size: 1KB - Virtual size: 1KB

RSRC6
Size: 2KB - Virtual size: 1KB

RSRC9
Size: 2KB - Virtual size: 1KB

RSRC2
Size: 1024B - Virtual size: 566B

RSRC8
Size: 1024B - Virtual size: 727B

.rsrc
Size: 6KB - Virtual size: 6KB

.reloc
Size: 1024B - Virtual size: 644B