17b72c3f0bef9eeeccaa4762bf2bbb65 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17b72c3f0bef9eeeccaa4762bf2bbb65
Size

100KB
MD5

17b72c3f0bef9eeeccaa4762bf2bbb65
SHA1

15306e67889b20ade2371c1bed0238a3a866647b
SHA256

1d3afc1c579f8bb3a6a83426f70da5d79a29c25becd93fed233a1af6f41d778c
SHA512

313209aa9474f2bb252784491d252586208d9cac1c48a90096b45b070641fa936212026e16c8e375672c020d9aecd59a245f343c6f86ef2fe065e9e45e7c348d
SSDEEP

3072:GT9RcoF6anBH8aGBoAli7lXOS713JqyEtgV/VTU4C:sc66uBHpMxAJqyHH4P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17b72c3f0bef9eeeccaa4762bf2bbb65

Files

17b72c3f0bef9eeeccaa4762bf2bbb65
.exe windows:4 windows x86 arch:x86

b5ea9071d77241a23990201dc223210f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadReadPtr
MultiByteToWideChar
GetModuleFileNameA
CreateProcessA
GetTickCount
GetCurrentProcess
GetLastError
GetModuleHandleA

ole32

CoUninitialize
OleCreate
OleSetContainedObject
CoInitialize

user32

MessageBoxA
GetMessageA
DestroyWindow
SetWindowLongA
LoadIconA
UpdateWindow
CreateWindowExA

advapi32

RegDeleteValueA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA

shell32

SHGetMalloc
SHGetPathFromIDListA

Sections

.text
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 854B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ