17258c7607804959efba5bbed8b2d25b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17258c7607804959efba5bbed8b2d25b
Size

56KB
MD5

17258c7607804959efba5bbed8b2d25b
SHA1

66b2657399292c559bf1ca560d6b31d0f6d176ba
SHA256

2cd7dc9b61e2853cdc0ad30c4775083071876bf396d6665a0f37cd6bfa7f6dbe
SHA512

593c10b2d3d9f9593d4412fb0aa63c7190d26c3b78fb30b151d19e48a733bc13a5f06b9721ec6767168b8d4d1ac2cd14e5484f05f30288f2fa35506a76d3e2cd
SSDEEP

1536:ffUC0zTTDdfjfd5mQxF9O5Y74Xerm7kW23ezmS:Hnkrfb7z7yUOn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17258c7607804959efba5bbed8b2d25b

Files

17258c7607804959efba5bbed8b2d25b
.exe windows:4 windows x86 arch:x86

17aa192476711439415d75869d252feb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumResourceNamesW
VerSetConditionMask
GetCPInfoExW
FindFirstChangeNotificationW
WriteFileEx
GetDiskFreeSpaceExA
LocalFileTimeToFileTime
WriteConsoleOutputCharacterA
MoveFileA
GetTapeStatus

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE