17aa05f3c70e113770e62d4875c13c0d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17aa05f3c70e113770e62d4875c13c0d
Size

149KB
MD5

17aa05f3c70e113770e62d4875c13c0d
SHA1

fb7424b8a73e79e1ea705af7dbbad4a6836b332f
SHA256

d758590ee04d62ee05a50cd583dd905b3cd203a84148e712e0f7b33f70299576
SHA512

3a18be2a428aef0356b68866724aa01271fd2481ba837f20f1510d0a45acbf59df3f255b792bbc20d99919af60bd5b30eefcacfec57cc45beed4d8625e0e0d53
SSDEEP

3072:pgX3cWwIHQqM2uFUYW/5dLCJMR71mGuS4DsO375ji91+eiZ3TWQNT3cj+oMi13O1:p6HpM2uabdLCJRGuS4DsOL5jEmTLm+N5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17aa05f3c70e113770e62d4875c13c0d

Files

17aa05f3c70e113770e62d4875c13c0d
.exe windows:4 windows x86 arch:x86

3d1d6974eacffd7ad326f3341bee11f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleFont
GetModuleFileNameW
GetTimeFormatW
GetDiskFreeSpaceA
CreateMailslotA
HeapWalk
EnumCalendarInfoW
EnumSystemCodePagesW
SetConsoleTitleW
IsProcessorFeaturePresent

user32

SendMessageW
ChangeMenuW
SubtractRect
WinHelpW
BeginDeferWindowPos
OemToCharW
SetCursorContents
IsCharAlphaNumericW
EndDeferWindowPos
GetForegroundWindow
EnableWindow

gdi32

UnloadNetworkFonts
FONTOBJ_cGetGlyphs
PatBlt
CreatePenIndirect
GdiGetCodePage
EngTransparentBlt
GetCharABCWidthsA
GdiFlush
AddFontResourceExW
LineDDA
XFORMOBJ_iGetXform
GdiTransparentBlt
CreatePolyPolygonRgn
IntersectClipRect

Sections

.text
Size: 16KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 128KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pack32
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ