17788e374a8e989dba0c57e4cf73f2d9 | Triage

Sharing

General

Target

17788e374a8e989dba0c57e4cf73f2d9
Size

211KB
MD5

17788e374a8e989dba0c57e4cf73f2d9
SHA1

b96ca54b85d9d2db2c4e0897e5c73211bf19f241
SHA256

7b9e744dc612ebd7d06e25e9f1881daf2f2413d1e14ebce10b4e53c89c1c8d3a
SHA512

2d51f132d2dc95a40815b8706d32407366f90186ce2e8950e40f1d320bad2cd199d8181601d045e01fb4047d6c6c97d7694ce8fa6f197487345dcda1d76e08fe
SSDEEP

6144:30Enyqi4nFti5YiAW4CuwW2SMNiWNzwmBx:n7iAnVwW2dgWhBB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17788e374a8e989dba0c57e4cf73f2d9

Files

17788e374a8e989dba0c57e4cf73f2d9
.exe windows:5 windows x86 arch:x86

6e23d8333d90c6f10b3d2fa1c30e8d00

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

AppendMenuW
LoadCursorA
GetDC
GetFocus
IsWindow
GetCursor
AlignRects

advapi32

RegQueryValueW
RegEnumKeyW
RegLoadKeyW
RegCreateKeyW

kernel32

ExitProcess
ExitThread
GetFileType

Sections

.448h
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bb4e
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.368ba
Size: 123KB - Virtual size: 411KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.59h15
Size: 1024B - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ