l17[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

l17.exe
Size

9.0MB
MD5

b5ee12c2df4f3e7b08630ea54e66c10e
SHA1

5965563b64f9072673e1e5ac906becf83d8834bb
SHA256

f0bc68dc7e2afbaeb7555627896490dc71f16a3fa677fd1caa200941df9cb57b
SHA512

006d3327536fb4779ea3445cae3ecaede96cb3d93c1d531fca979144f498d9b924b903c204ca9a9f99ef4811a74a7b09a4901ec7d0c32c4ff9d683bc328cd759
SSDEEP

768:v7mQZqx1lYcJHNP19TfSt1UVkypgXbOfq18kXXQ:v70lY2fSt+JobOOXXQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
l17.exe

Files

l17.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 9.0MB - Virtual size: 9.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ