17cb17eb2bbc23b786d194e3199e419e | Triage

Sharing

General

Target

17cb17eb2bbc23b786d194e3199e419e
Size

732KB
MD5

17cb17eb2bbc23b786d194e3199e419e
SHA1

1cb014c53385e60adeb79a06d0a5fe0614bab399
SHA256

831032139510a09994b1500ad16013641519dce287f9adb6241b6ee0b8a1f578
SHA512

581cc5a52106587dce2647b79cc0f6edde3d492c9c2c2fa6b3e53b7a8ad24a4d3327e42a3899ff7f61a289eb034e0e33d4a5d7541d68f2c1552a60c450ab227d
SSDEEP

12288:UShKg8H5btg8d3ZsurFQrfiLXK6duSs2dsED9sXz3B+fR+/9C7E7h8z5dRkT0d+Q:H8Z/3nBQj6b421a+5+wYadLLRz5C2H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17cb17eb2bbc23b786d194e3199e419e

Files

17cb17eb2bbc23b786d194e3199e419e
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.naked1
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.naked2
Size: 728KB - Virtual size: 728KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ