17c0d66692eda0f2bc56f7c7ecc315b5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17c0d66692eda0f2bc56f7c7ecc315b5
Size

252KB
MD5

17c0d66692eda0f2bc56f7c7ecc315b5
SHA1

b9273ff36325a4702f90a0f68e3d1f3b71f9c300
SHA256

e1611aca31939ef828150bfbdf5860eb9d12f8ae8e82c90891158153e23256e4
SHA512

ae4e52d40a6f6d1418955faf72db0c60a4461d782e804c2bc17ac2e3dd5eec30e37299605fcf73f8f76f3f626966475ee437d675dc14c663d16a73404f469dad
SSDEEP

3072:F6iiuvpYTIUByOzP/isfJmeVmaXgZcal9LVSV4VmsTEDMCuCGY/B62YwmoziyfAB:F6iiu2nlXZ0eVJscaoiczNYszgdT6FK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17c0d66692eda0f2bc56f7c7ecc315b5

Files

17c0d66692eda0f2bc56f7c7ecc315b5
.exe windows:4 windows x86 arch:x86

a6146eb6f9f36ff7773dd5e067b4c92f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetFolderPathA
Shell_NotifyIconA

kernel32

GetFileSize
CreateFileA
HeapFree
WriteFile
HeapAlloc
GetProcessHeap
lstrcatA
GetModuleFileNameA
lstrlenA
ReadFile
GetLastError
GetCurrentProcess
CreateThread
CreateProcessA
CreateMutexA
OpenMutexA
CreateDirectoryA
GetWindowsDirectoryA
FreeLibrary
CloseHandle
LoadLibraryA
GetModuleHandleA
ExitProcess
Sleep
lstrcpyA
CopyFileA
GetProcAddress

advapi32

RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegQueryValueExA
RegCloseKey

user32

TranslateMessage
GetMessageA
CreateWindowExA
RegisterClassA
DispatchMessageA
SendMessageA
ExitWindowsEx
DefWindowProcA
PostQuitMessage
LoadCursorA
LoadIconA

urlmon

URLDownloadToFileA

shlwapi

PathFileExistsA

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 228KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ