17c46e7cf825bd1ad09e7e33f24dcdc8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17c46e7cf825bd1ad09e7e33f24dcdc8
Size

302KB
MD5

17c46e7cf825bd1ad09e7e33f24dcdc8
SHA1

84076b78cbc530a4acde46d3685837d4531dd39f
SHA256

e6d754d47d0c5aeb27e9830ad272743721dca850769e4e9d9675fc5a8baa1105
SHA512

0926de60ae116c45a29c973e66186546573a9b0c455489d8b962c32f401b55c31935013dc5a6542cdd26b25598976aaf025c82b9dac938c2b671cd49cc453d8f
SSDEEP

6144:SILD88xUfKf1EAiQDjy3e24kmcOVzbNJHmKkW4qe3bu:JLD88xUfKf1EAiQngeVvVzbHGmJea

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17c46e7cf825bd1ad09e7e33f24dcdc8

Files

17c46e7cf825bd1ad09e7e33f24dcdc8
.exe windows:4 windows x86 arch:x86

9833ea66d47b2f2fca66c4563076eb73

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
GlobalAlloc
GlobalFree
ExitProcess

user32

MessageBoxA

advapi32

RegFlushKey

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

stxt774
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

stxt371
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE