02161699[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02161699.exe
Size

686KB
MD5

7f9f5628b1698378cecaff303fb4cf2d
SHA1

4dd8588e204f8645afc005cc7deb8572df5f9103
SHA256

4ab89b325e3a60240b9696e26406d31b5c328d5c684759022a9c1523104fc5a0
SHA512

7218308b81d8a67001b2682796efebd1b6af5e0ca54f7ab561a6bd421ddb24f31dfdc4b2f985021dadfc3e8de857d87d30654d4dd336aa571035777f21845cf0
SSDEEP

12288:asIdul2iNfmFx2iqNhujGjUBnWjmKL6qB8J4MYUZeB818A5m7g14SK9Yrqzotwff:asIdul1lmFxUKncO5xnA3A5m7KBjrqm+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02161699.exe

Files

02161699.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 684KB - Virtual size: 683KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ