17b1748d21cf7af4a1df41a7c670ea05 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17b1748d21cf7af4a1df41a7c670ea05
Size

23KB
MD5

17b1748d21cf7af4a1df41a7c670ea05
SHA1

e5c6837d1a9d37b7b97cc94009abb83429408d2f
SHA256

48bbc4f066e80ce7808d0299a02a415c245ed4ef9f841ed424fc02bce2f82639
SHA512

feef53e03d3b6f322d2dc8237931a9dfd8e640c19f685ffb53dbffe8fa0766b95caa7cada794f8716a8d1198b717f8098cd19a10881090aa1005b7984041d834
SSDEEP

384:ZMc+FUyDctXqyu3UgVMmlYB3GCAQFYlludSt:gUwcgy4UNGCAyYllMSt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17b1748d21cf7af4a1df41a7c670ea05

Files

17b1748d21cf7af4a1df41a7c670ea05
.exe windows:4 windows x86 arch:x86

e5a66515e9d7ae5221dc7b1ac10810b9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SizeofResource
FindResourceA
GetModuleFileNameA
GetProcAddress
LoadLibraryA
VirtualProtect
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadResource
GetACP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
IsBadWritePtr
HeapReAlloc
VirtualAlloc
WriteFile
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetOEMCP
LockResource
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetStringTypeW

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ