c17e1114d97ff0c56d0fb71a2e67db9c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c17e1114d97ff0c56d0fb71a2e67db9c
Size

96KB
MD5

c17e1114d97ff0c56d0fb71a2e67db9c
SHA1

6f1006dc4c12d0e97845c892bb4ba47a94554647
SHA256

b4fe8af515ec4d3ace04200fa1626ac629120b2556f9dd236fedd49d793e160a
SHA512

f5cfabc9d44192bd738ec89c36c65b07613e3021065dc638471fde271cdcdb6111310ef52e1e18dcda9e08d108f011b482b2c1e26bf4355dcda2cb1b2937b6f8
SSDEEP

1536:OhUYd4hXKeuMqmL4xC0JvjJ/wP17y4kwVTXZOM9E5kvCNy1j1bkO4QfFq0/BHN71:Oj4hawqmLqCSjRwtW4k8TXZOM9E56CNS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c17e1114d97ff0c56d0fb71a2e67db9c

Files

c17e1114d97ff0c56d0fb71a2e67db9c
.exe windows:4 windows x86 arch:x86

14546693be9d28fe651908fca7286b40

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
ReadFile
CreateProcessA
MultiByteToWideChar
IsBadReadPtr
GetModuleFileNameA
GetModuleHandleA
DeleteFileA
GetWindowsDirectoryA
SetFilePointer

ole32

OleCreate

user32

GetSystemMetrics
GetWindowLongA
DispatchMessageA
GetMessageA
DestroyWindow
TranslateMessage
DefWindowProcA
MessageBoxA
PostQuitMessage

advapi32

RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegOpenKeyExA

shell32

SHGetPathFromIDListA

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 914B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ