17f75f20a881fbda75d07b6e88321f0f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17f75f20a881fbda75d07b6e88321f0f
Size

484KB
MD5

17f75f20a881fbda75d07b6e88321f0f
SHA1

7a365a992a38c9f65fe9a3fc6f75be33ffbdc8c7
SHA256

638386fc67c4319eef20fa4e3d2ab6240713507498cb0624decf1197cf394565
SHA512

372b451e3b1c138d443e894d73d9a6eca54c5fdc49c662ba5f93e46bd57a6c59df65e21f7d8b29b15ec992b3bfe57b7564195a97ded12d9f2ca8e61948bfcd08
SSDEEP

12288:dShYlHD7CdKOyKZ7M1oWw0h1zeWaF46KtCWrgEm6BDg:0CHHCYOhYtw0h8WaSFt9s+D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17f75f20a881fbda75d07b6e88321f0f

Files

17f75f20a881fbda75d07b6e88321f0f
.exe windows:4 windows x86 arch:x86

f61b23febbfe7d999c7efb97550a983c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
SetLocalPrimaryComputerNameA
GetCommConfig

advapi32

InitializeSid

ntdll

RtlDeregisterWait

user32

GetShellWindow
GetCaretBlinkTime

Sections

.text
Size: 478KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 366B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE