173f902f0c248e95d6d3b02f76c017ee | Triage

Sharing

General

Target

173f902f0c248e95d6d3b02f76c017ee
Size

6KB
MD5

173f902f0c248e95d6d3b02f76c017ee
SHA1

8c1c8cc067a07701ce70294b2f9caee41e432702
SHA256

75aaeb31cc3dd8ffce62c9aee556d976a6a63479fd836e4a2460089a9dc8e1c8
SHA512

72ba351d5942325f538a2b72a3b4c4d6adb3bc7d7a8aa268ff4d184b643cc7cccbd7f2e7f604b56b0b0a6241920601622f8c194e15caea0d4f99829c9be77da0
SSDEEP

48:6EQt5YVOSVVEPy+wEMmqiHNpU107SB+BDq9J5SV3DY:CSVVEPozmB7MB+FqX5S1D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
173f902f0c248e95d6d3b02f76c017ee

Files

173f902f0c248e95d6d3b02f76c017ee
.dll windows:1 windows x86 arch:x86

0ed11c14a2759c69bfa93dd64e1f1654

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
GetEnvironmentStringsA
CloseHandle
GetSystemDirectoryA
OpenMutexA
RtlUnwind
WinExec

crtdll

_fdopen
_open_osfhandle
fclose
_cexit
malloc
printf
raise
setbuf
sprintf
strcpy

Exports

Exports

_Udarim_kartonom_po_USD

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84B - Virtual size: 84B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 176B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 620B - Virtual size: 620B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 152B - Virtual size: 152B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE

.edata
Size: 84B - Virtual size: 84B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ