16cc43812d3fd9df8c309a951643d295e05728d9457731ea286f45d1dfd300a8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16cc43812d3fd9df8c309a951643d295e05728d9457731ea286f45d1dfd300a8
Size

6.8MB
MD5

364a2780a0b1506448882d677f59a659
SHA1

9b44b585a39167c577995f985389c933fbc220e6
SHA256

16cc43812d3fd9df8c309a951643d295e05728d9457731ea286f45d1dfd300a8
SHA512

1c408df14e83d3c96e78d2909659b4ec5da1b5b9343887f94d253130809b31c4c6c085ce351aa7d5731b0898944b783cb9a4981f638246be2fda5e7d9465c468
SSDEEP

196608:l6lV9bJkqTxLCcCKiOYr7IFtoP1OYIYB08Lx6+w1:AlpRxrCKiOYXSaNhIYBjsD1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16cc43812d3fd9df8c309a951643d295e05728d9457731ea286f45d1dfd300a8

Files

16cc43812d3fd9df8c309a951643d295e05728d9457731ea286f45d1dfd300a8
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ