16a75bacfd82a05161928b7c5418b23f | Triage

Sharing

General

Target

16a75bacfd82a05161928b7c5418b23f
Size

363KB
MD5

16a75bacfd82a05161928b7c5418b23f
SHA1

49017ad75509a76480c8b61a49d7f5bb67bb5a72
SHA256

3bf7b10d9960ff916bf58592dd1981fbe6a3be73c1cf9e57d564402652a18b62
SHA512

362d9ec783508e55d90cf27e45b72cb10c5f168021293f37871d45a0d49bfb45a509b0f94597526b284f6bac879d7970d24c50905daf7e5e8785fd6b6a3bf42e
SSDEEP

6144:QRMeGsWuyp2TgwtwSDGYwgGjgx2GKLfXL7wNzv9q8Woq62a2yulov7rrkcaAiIEo:Vc912gaf7ENzilydnE/VC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16a75bacfd82a05161928b7c5418b23f

Files

16a75bacfd82a05161928b7c5418b23f
.exe windows:4 windows x86 arch:x86

9e49a0e7a29388b50a09fdbba3024679

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
GetProcAddress
LoadLibraryA
GetWindowsDirectoryA
ReadFile
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetProcessHeap
HeapAlloc
GetCommandLineA
HeapFree

user32

wsprintfA

shell32

ShellExecuteA

Sections

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ