17cadec6ce2b39c5e094acd2f38e5b9a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17cadec6ce2b39c5e094acd2f38e5b9a
Size

17KB
MD5

17cadec6ce2b39c5e094acd2f38e5b9a
SHA1

a1ddc7c22ec36f841be56357ba0cd57e362ed7d3
SHA256

b86850b8c4be8be028c48b50d80bdf8374bbc76d6595956a952318a91835aed9
SHA512

05f3f7d1b9ea1b5bac70f118bff829196584b2f8f52531e06d00ce2845354d9bfd4414529aaa2a3c0b1035be232086f7218e02a9603fa6e53e265750f5e6f474
SSDEEP

192:OoQr/XzPUb6smJL3JKIBSdcsE4QVUKGjbYjdUdxMKi4zXiRIdgIQL6CItrt:OnzDMbWvBqzE4CUMdCx/JzXF6T+1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17cadec6ce2b39c5e094acd2f38e5b9a

Files

17cadec6ce2b39c5e094acd2f38e5b9a
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 9KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE