16bd7994dc5d6c38b382ba9509253fb9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16bd7994dc5d6c38b382ba9509253fb9
Size

1.1MB
MD5

16bd7994dc5d6c38b382ba9509253fb9
SHA1

17433212f9619dc9f7b0949eca81c200f0b3a52e
SHA256

e16210fee5daf3441d9ec3ded7c1f7ed5e7cb2bc57275a8825d3f1c15da8f77d
SHA512

5d20b262b13c4c4812f0cd5d59fcc1a8caf858d46eb4819fdf48df4e90d6904d3c92a7755c066048ac2567ea750054e2518ca49b6baa78f32663c7441847a0e4
SSDEEP

24576:zXwt13f2WY2HTGTvBb9sCpNi9H9gW71iVmTncGsiuQF:zwz2pTv0AA9dg6LTcG1n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16bd7994dc5d6c38b382ba9509253fb9

Files

16bd7994dc5d6c38b382ba9509253fb9
.exe windows:4 windows x86 arch:x86

d5f2d8849813a4009dd8b330de1b3bde

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

DefWindowProcA

oleaut32

VariantChangeTypeEx

Sections

Size: 1.0MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE