17b04a21b4539dac2369ea5404e62f51 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17b04a21b4539dac2369ea5404e62f51
Size

163KB
MD5

17b04a21b4539dac2369ea5404e62f51
SHA1

ae4d6774004e0384c12f9837b8dc43c9020facf4
SHA256

06dc19fa10f7a96a115c334ea39c00546f60fd0f18d52408777daee92551bf68
SHA512

85e254717e607077d2ebc7fd556e81f9582d4008f9f7e92ee586d9fbbb8e4b4598f349c33c283557a729107e1b33c7d3c07a0d3cd230d99f3299e089c3983988
SSDEEP

3072:kD/VXxtvko2R+bPZp0RDabARs/L3875jwqO0ApOuWiFfiEpEZl7UYZA:kBXko2R+bMYr8r9ApgYiaEZl4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17b04a21b4539dac2369ea5404e62f51

Files

17b04a21b4539dac2369ea5404e62f51
.exe windows:5 windows x86 arch:x86

7ed06c53057118081bf12d99359a3510

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDC
IsCharUpperW
IsCharAlphaA

kernel32

GetTickCount

Exports

Exports

?VortexShardErase@@YG_KPAUHBITMAP__@@PAU_PSP@@@Z

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.maps
Size: 512B - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.p5
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.p4
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.p3
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.p2
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.p1
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ