170cb240fb56a282f4f5c14b9c503e74 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

170cb240fb56a282f4f5c14b9c503e74
Size

60KB
MD5

170cb240fb56a282f4f5c14b9c503e74
SHA1

4d744dd80a24e62571b50891f80b01f0f57d479e
SHA256

7df8a2d54cbecaead7e03d3236354ccbc927f8d9c27e267d3d129a85de3de9c6
SHA512

298de3aa547555d190f4661796b13f46fbdb3276fbe12a1c8dcf07df43b38a8133b24473d6be3efddfe213f0bf2fe2831feb3f5fdc61955a3e5a39fb5b3fb986
SSDEEP

768:DYYgtOAQqeV5cqGvehyNGJ6VnVvUS4o5PjOlTM9TFpufrXZ/BQW1j2vM+kIpEIR3:EYg3amqGmhPge1oJTTF0frVh7ypEydB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
170cb240fb56a282f4f5c14b9c503e74

Files

170cb240fb56a282f4f5c14b9c503e74
.exe windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.text
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_TEXT2
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE