17bd841a4c1c781f3f8ae9d6f6c454db | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17bd841a4c1c781f3f8ae9d6f6c454db
Size

190KB
MD5

17bd841a4c1c781f3f8ae9d6f6c454db
SHA1

d4798b15b2a2b6e8cf908825f5b0de62a14be0e9
SHA256

818aa786db9a12dffd6c9569a65086e4b6f18b10cb8a6fc88f456318fa3601dc
SHA512

d6cd3b8ede426232673aaea734865ad2b0cebfc716305da2de118b571b7280094fabe259868e56980995d4d898b1eacc1dd85c854e30faf86bb167978d65dd06
SSDEEP

3072:heR4BCpn2580K2S8PtixqFQcDuUdln+ha7TNKePgJ5LMlQ+eBfNoX3f/LNHIqAw:MR5n258mnFBDTdlV7tLlWBfmHf/LNH+w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17bd841a4c1c781f3f8ae9d6f6c454db

Files

17bd841a4c1c781f3f8ae9d6f6c454db
.exe windows:4 windows x86 arch:x86

f4089fe30323b0998ab170aa1ab245a6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 181KB - Virtual size: 584KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE