16dfff641f9cc2a18d51b7431569f8c9d72146afbb502e92cca1dc9675a2fa15 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16dfff641f9cc2a18d51b7431569f8c9d72146afbb502e92cca1dc9675a2fa15
Size

3.1MB
MD5

6c73b680f91ae2007704219fe83eba1d
SHA1

57a3f4b14a635d1540a424653972fd83bfd938ca
SHA256

16dfff641f9cc2a18d51b7431569f8c9d72146afbb502e92cca1dc9675a2fa15
SHA512

a2acc283f0a4acdb6c41845c1c0cc8af332e71aad34f2b4aea081cab077b859da2be454d3fc02a37dc14dd44a3e074ec88662f832b947af08dc95bbdd6283107
SSDEEP

49152:rh6TxTjit8TyFTDYQPmQCBl3pT+lbRq5RqcwRsRu2e:AYLThmolRsFe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16dfff641f9cc2a18d51b7431569f8c9d72146afbb502e92cca1dc9675a2fa15

Files

16dfff641f9cc2a18d51b7431569f8c9d72146afbb502e92cca1dc9675a2fa15
.exe windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 419KB - Virtual size: 418KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ