16bb0275f95431a4888947c2fbb153b5bc92e86fe2220e7379170a8e3071ccc4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16bb0275f95431a4888947c2fbb153b5bc92e86fe2220e7379170a8e3071ccc4
Size

12.4MB
MD5

8f433e31f4a6d1ddcec861a7e33b57d4
SHA1

329de7a00b2aa5055e2e7e976490c6042391473c
SHA256

16bb0275f95431a4888947c2fbb153b5bc92e86fe2220e7379170a8e3071ccc4
SHA512

b4033b6b6ae28eb188f27902d57aacd2a1cada4276acbb0962a78c1ab127fea8239be00b4f4ba3a97287b4f778f76a827d726e03c46e2a9732e0c3e90a8b7274
SSDEEP

196608:zwICr/Y0DH06lGgmCBK5u5kX5uCNSEgCdagIWWUOtBJAkods2rE4HHKx2JwPDkF:Krw0LVfTBYu5kgCLg0aHWOtzoNrHHss

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16bb0275f95431a4888947c2fbb153b5bc92e86fe2220e7379170a8e3071ccc4

Files

16bb0275f95431a4888947c2fbb153b5bc92e86fe2220e7379170a8e3071ccc4
.exe windows x86

e1e77c5250e0baf015f018c515ac8c5d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

winmm

midiStreamOut

ws2_32

socket

user32

ScreenToClient

gdi32

ExtSelectClipRgn

winspool.drv

OpenPrinterA

advapi32

RegOpenKeyExA

shell32

Shell_NotifyIconA

ole32

CoGetClassObject

oleaut32

SysStringLen

comctl32

ImageList_ReplaceIcon

oledlg

ord8

comdlg32

GetFileTitleA

Sections

.text
Size: 3.5MB - Virtual size: 10.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE