17646ff55342e884fabd683d193f50c0N | Triage

Sharing

General

Target

17646ff55342e884fabd683d193f50c0N
Size

120KB
MD5

17646ff55342e884fabd683d193f50c0
SHA1

cf0e40e8067853f2900bad16a81142a6e5d02f89
SHA256

3c8960cbe4075435bedbc43bd7f8d06d5b67fcb2a55f1fb504eeceb2a6af6cd7
SHA512

22be67a9540a5a3d5ab76c29ac12e75b0cdb2f3e5f4a81e977640b72c1e07ae8fd63b54d753b7551d21636c07cf609ca4a5f6c98accbd13a3db17f2c32d6b64e
SSDEEP

1536:pX3NiNXhHnWVM75dsyl484YwK79VA08+UxLkPWN5Jkg4SGYwU/bDKvLd8s3HdXDX:nuH0M7I1XYz7w08Bxw+eJ5YwUzej5zk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17646ff55342e884fabd683d193f50c0N

Files

17646ff55342e884fabd683d193f50c0N
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ