170c9732c3bdc2af8f5325e6859d3529 | Triage

Sharing

General

Target

170c9732c3bdc2af8f5325e6859d3529
Size

16KB
MD5

170c9732c3bdc2af8f5325e6859d3529
SHA1

28143b525d42d61a5bf2d982a5ea1f7fa1892384
SHA256

1388cb7ec1d77a8625b03c7270cfd70b25411b73a44c006bd74d7d7905b58c8a
SHA512

03fde0fedbf4545d5cca8819b647842e1b0875343efe1073cd872a49a8a179ed21822d9f9f033ccd7187a8e46a447a81776653458a17adbf00de1e714a2c7a78
SSDEEP

192:J2gyosBswnMP1oyndunYe+PjPQu7wrS/zdR+v82Or9ZCspE+TM4rFUvJ17Pgbq:AgyFnS1GnYPLQ07b2neMfEbq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
170c9732c3bdc2af8f5325e6859d3529

Files

170c9732c3bdc2af8f5325e6859d3529
.exe windows:4 windows x86 arch:x86

cf20a55b450ae09e664c08c35c1b37c2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
FreeLibrary
GetSystemDirectoryA
GetFileAttributesA
LoadLibraryA
GetModuleHandleA
GetStartupInfoA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

wininet

InternetOpenA
InternetCloseHandle
InternetSetOptionA
InternetOpenUrlA

msvcrt

_acmdln
memset
sprintf
strcpy
strcat
_snprintf
_controlfp
strrchr
_mbsrchr
_exit
_XcptFilter
exit
strlen
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1010B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE