16f0b1675c08d75d1e8caf9e8b0ff52a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16f0b1675c08d75d1e8caf9e8b0ff52a
Size

251KB
MD5

16f0b1675c08d75d1e8caf9e8b0ff52a
SHA1

532ce14ba9342b9d062d94996abdbc8eb633ee25
SHA256

4f92adbad607695adcaee51f8ebf11e7b0526e87af74ec91e1404201ec233a8b
SHA512

0ad5bcefe9e8878391ddf62ff64ad8982859eac91ab137ca46ef77f8fe669a5a0393faeef7df59a6a11a84e1004aa146482581fe08823d770c165e959f7129e9
SSDEEP

6144:06TL5vFV/N+zTUVs8lCvAuRg8MJ6GtRyd/e:3lFV/N+zTUVs8lCvAuRg8MJ6GtRqG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16f0b1675c08d75d1e8caf9e8b0ff52a

Files

16f0b1675c08d75d1e8caf9e8b0ff52a
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

KtRW/_
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ