17528161d75d5c13b9a35bd523a1f4f36cb9554dcc2cc609755107f55b1cd45b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17528161d75d5c13b9a35bd523a1f4f36cb9554dcc2cc609755107f55b1cd45b
Size

9KB
MD5

b8da675f41ea93ea27c76db661bc095d
SHA1

92bfaca3eddc06df24ae768793a07da10e7ca71a
SHA256

17528161d75d5c13b9a35bd523a1f4f36cb9554dcc2cc609755107f55b1cd45b
SHA512

3f9cb0893c0bfe1b10ab3e109dae76b4b46ab43a642f5dd54a1d5306257d16ff15682f948d1402511768262d9daf5424ebbfce038679148e9335e5e918ac98a6
SSDEEP

192:t6f0CW5P2Io4evFrDv2ZRJzCn7URRsjVJaZF:t6fPWl24evFrT2ZR5Cn7UR0VJo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17528161d75d5c13b9a35bd523a1f4f36cb9554dcc2cc609755107f55b1cd45b

Files

17528161d75d5c13b9a35bd523a1f4f36cb9554dcc2cc609755107f55b1cd45b
.exe windows:5 windows x86 arch:x86

ea8609d4dad999f73ec4b6f8e7b28e55

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

netapi32

DsRoleGetPrimaryDomainInformation

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 512B - Virtual size: 106B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ