16080f2acb77011bdd74eb44f3dd63ca | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16080f2acb77011bdd74eb44f3dd63ca
Size

219KB
MD5

16080f2acb77011bdd74eb44f3dd63ca
SHA1

1de6b8fbeecacfc5a25c4ce45f89b48424de57d4
SHA256

8eeca1a0b838dd4f4f3b7a4c0f5811e30ecc4e6babd42df05c7af4c1845e4f63
SHA512

f12c37f95a8518d09c4480f61d0ecea3120c42a905c119f658da661b7bb776134ba3ced890903269dbade2b1c9c0abed74b3498935a13360317018cb10e65752
SSDEEP

6144:jrx+2UpuTnwGZitmIuLL0wHQlDVB7SfM4N7ASlnWUQ:3E2JTnwXmIzN3oASlnWUQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16080f2acb77011bdd74eb44f3dd63ca

Files

16080f2acb77011bdd74eb44f3dd63ca
.exe windows:4 windows x86 arch:x86

6039c26165040db47e28057ca34786ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

srand
memcmp
strcat
isdigit
isspace
memcpy
rename
memset
_EH_prolog
__CxxFrameHandler
strcmp
strncpy
strstr
strcpy
rand
abs
strlen

user32

MessageBoxA
wvsprintfA

kernel32

GetModuleHandleA
HeapReAlloc
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryA
GetProcAddress
GetTickCount
GetStartupInfoA
GetCommandLineA
ExitProcess

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE