16e166b37a7d570b1c56b7ae22d0a00b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16e166b37a7d570b1c56b7ae22d0a00b
Size

150KB
MD5

16e166b37a7d570b1c56b7ae22d0a00b
SHA1

59a81ee12aefc84abf196b4ebe9ca9c9952082cc
SHA256

a54335f46fe67662a0a93e1f33f8846dc35d88f8809dd6bb68897c81d29f72bf
SHA512

82cd7c1abdaa2700ce571db4ed8d9a817752f4da4ef8b69db930838522b4a870e73114aa9267d815a19d3279005b27d3e47d4deb07634f772f9cedc285bdc306
SSDEEP

3072:xr6l4AWhQ/ssJM5QkoC5AaIjWyW98YJfYQ9OkXq27S+:xra4RQ/ssXyHIjWrbp6Yt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16e166b37a7d570b1c56b7ae22d0a00b

Files

16e166b37a7d570b1c56b7ae22d0a00b
.exe windows:4 windows x86 arch:x86

865e82253762fc1e6d1f7ca1c42c9d59

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetModuleHandleA
GetSystemTime
lstrlenA
VirtualProtectEx
GetStdHandle
CreateEventA
GlobalLock
GetACP
GetLastError
FreeConsole
LocalFree
GetCPInfo
GetConsoleTitleW
CancelIo
GlobalUnlock
LoadLibraryExW
CreateMutexA
FindClose
IsBadReadPtr

user32

GetSubMenu
LoadCursorA
IsIconic
GetMessageA
GetDlgItemTextA
DialogBoxParamA
EndDialog
IsMenu
GetKeyState
ClipCursor
GetParent
GetMessageA
CreateWindowExA
MessageBoxA

clbcatq

SetupSave
GetComputerObject
GetCatalogObject
ComPlusMigrate
CheckMemoryGates

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ