17a80523ea7ee40c4784ba2936bf74bd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17a80523ea7ee40c4784ba2936bf74bd
Size

46KB
MD5

17a80523ea7ee40c4784ba2936bf74bd
SHA1

8558c5d6da6cc625b1f73f44c42812968ad012dc
SHA256

8798fe5dd833b305a096025060d5002abc6e2c57e2216cbee835c1c966c2c30f
SHA512

ab3c05bbbb8e1f1cbfaa118e5e5da069a3c13f1976af7aab1eb838d4f01c9ddbfc2405105e4f5b488e7a1743774a18c9394a034e1998bd1f0ddbfd13c2afd495
SSDEEP

768:ZjejaabxL3ffXSRtJBRiQNsXcKn9wboH6Rqz:MjaMpYZRiz29qz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17a80523ea7ee40c4784ba2936bf74bd

Files

17a80523ea7ee40c4784ba2936bf74bd
.exe windows:4 windows x86 arch:x86

ef423445c1b4e2c5cfb2bd0c3549d189

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

advapi32

RegQueryValueA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueW
RegSetValueW
RegSetValueA
RegCreateKeyA
RegDeleteValueA
RegOpenKeyExA
RegEnumKeyA
RegOpenKeyW
RegOpenKeyExW
RegQueryValueExA
RegDeleteKeyW
RegEnumValueA
RegOpenKeyA
RegCreateKeyW
RegEnumKeyW

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bbs
Size: - Virtual size: 57KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 11B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bbs
Size: 512B - Virtual size: 465B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ