16c6cb2349cb410cf3a78de8fcc3c688 | Triage

Sharing

General

Target

16c6cb2349cb410cf3a78de8fcc3c688
Size

507KB
MD5

16c6cb2349cb410cf3a78de8fcc3c688
SHA1

0b6ad78f4cecf86165009fcac9575bff873391c3
SHA256

5ecd27eac1d60ef9a4fb6c937ce2687d31e636888421e493e2acd6cfeccaba8c
SHA512

6733948d2eee53f93b23051bd38cf9a6994c103ea1023460fabd0ed56ef22118bef276c1e207bc79d2541ac849e20107f6c44602220bdb63afd0b2fb3124316d
SSDEEP

12288:+9Ogm5KlXU+vF8kM3+HkRTLEPMsmstvxrelk:8vm5WFF8ki+HgTL1smstvxr0k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16c6cb2349cb410cf3a78de8fcc3c688

Files

16c6cb2349cb410cf3a78de8fcc3c688
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 219KB - Virtual size: 218KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pmj
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE