16ef7e863f8ff8ee0bfb99de40b7bc7167f6e9a7c0dd9d4d83f54a45b234638a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16ef7e863f8ff8ee0bfb99de40b7bc7167f6e9a7c0dd9d4d83f54a45b234638a
Size

37KB
MD5

6271f4d6468f3c9ce5921764a0549961
SHA1

8394646ea597495a2aed7b38705b492ce42ecf7d
SHA256

16ef7e863f8ff8ee0bfb99de40b7bc7167f6e9a7c0dd9d4d83f54a45b234638a
SHA512

d4db1f78120962c6d94491da470bd2536410c3fa6aab6f1ac5fecf01c7414325667e7a8fbe74b947c1a6022f37cf3d11c85fd39be0522f9f298d846f6d069d32
SSDEEP

768:jpuxbbb93pfzxWt7QYQ8IgDidhHPjAJYvHF0lwY437avXKrnrR:j0Rbb5WRQYt9ir/2wray

Score

N/A

Malware Config

Signatures

Files

16ef7e863f8ff8ee0bfb99de40b7bc7167f6e9a7c0dd9d4d83f54a45b234638a
.exe windows x86

879072da78b6146d76f51c669b56a5f6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
GetTickCount
GetProcAddress
LoadLibraryA
HeapFree
HeapAlloc
GetProcessHeap
VirtualProtect

user32

ShowWindowAsync
GetLastActivePopup
RegisterClassA
GetParent

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 392B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE