17ba62930941c49bae23c640ff595514 | Triage

Sharing

General

Target

17ba62930941c49bae23c640ff595514
Size

98KB
MD5

17ba62930941c49bae23c640ff595514
SHA1

8e99cc5113ac43403a4ae3d6127e8cfb82f04b1d
SHA256

14c7efdd8a5b461a67281405202a07bcf40773478474db4103e3d284d445ae4e
SHA512

9fe9bed10c14f0f0cdf7e19df485e03a3c399d9945722320b3be468dc01f52dc70b87f74119dc93913f5d4bb0ddabde230a9b4d472819d1995f12e18974eee31
SSDEEP

3072:3nmMm3bMXxdmI1Br74DPufu55a4W6WDLG4C:3ZybUd9f4DPu85PW62LG4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17ba62930941c49bae23c640ff595514

Files

17ba62930941c49bae23c640ff595514
.exe windows:4 windows x86 arch:x86

8b4cc2be0324264fac1338e1727600aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
DeleteFileA
lstrcpyA
lstrlenA
GetTempFileNameA
GetTempPathA
GlobalAlloc
ExitProcess
GetCommandLineA
GetModuleHandleA

shell32

ShellExecuteA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 94KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ