16466424a792314e3411bfcc7204ca19

General

Target

16466424a792314e3411bfcc7204ca19
Size

121KB
MD5

16466424a792314e3411bfcc7204ca19
SHA1

8488483d1a5addfa3659aa72ba82964d6d08fd11
SHA256

8638b1e29a33008acee9b1f2b3768852b8211ee68aedbf8910b8433b29aa45f4
SHA512

b2f79578f88d5d8ad0344d5150f9027a9998b3298e5b79dcf74d727ff8ef6aa4c681898d7b4f5209b54c3e64ca21f05dac6eab56e297ec1f3125573beed62f28
SSDEEP

3072:9sF+p7Kbobfuh2nihzc4OkPyHnZu/Vpa5u/SRxC/Zd8r:C4o+mVWXZnOEg/SRxC/Zqr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16466424a792314e3411bfcc7204ca19

Files

16466424a792314e3411bfcc7204ca19
.exe windows:4 windows x86 arch:x86

adbb77a3a51d9be4c40aa8ff3942bca2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

RpcStringFreeA
RpcStringBindingComposeW
RpcStringBindingComposeA
RpcImpersonateClient

kernel32

VirtualAlloc

ws2_32

WSAGetLastError

oleacc

LresultFromObject
CreateStdAccessibleObject

shlwapi

PathIsUNCW
PathRemoveExtensionW
PathStripToRootW
PathFindExtensionW
PathFindFileNameW

wininet

FtpCommandA
FindFirstUrlCacheEntryA

msvcrt

_itow
_snwprintf
__dllonexit
sprintf
malloc
wcscpy
wcschr
_ultoa
wcslen
memmove
atol
wcscat
_ltoa
strncmp
wcscmp
isupper
strtoul
free
qsort
_wcsnicmp
_onexit
bsearch
strncpy
isxdigit
_ltow
_except_handler3
_initterm

shell32

ShellExecuteW
Shell_NotifyIconW

Sections

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

adbb77a3a51d9be4c40aa8ff3942bca2

Headers

DLL Characteristics

File Characteristics

Imports

rpcrt4

kernel32

ws2_32

oleacc

shlwapi

wininet

msvcrt

shell32

Sections

.rsrc Size: 3KB - Virtual size: 2KB

.data Size: 1KB - Virtual size: 264KB

.text Size: 3KB - Virtual size: 2KB

.rdata Size: 112KB - Virtual size: 112KB

.reloc Size: 512B - Virtual size: 24B

.rsrc
Size: 3KB - Virtual size: 2KB

.data
Size: 1KB - Virtual size: 264KB

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 112KB - Virtual size: 112KB

.reloc
Size: 512B - Virtual size: 24B