16b2e8c57ddae0a8cf4a82f10ca404af

General

Target

16b2e8c57ddae0a8cf4a82f10ca404af
Size

7KB
MD5

16b2e8c57ddae0a8cf4a82f10ca404af
SHA1

cefbb338eb3647c78b991ca84ae35be6ef8c43de
SHA256

41aa7b437c28490b6ec7a0d6fc8d6454cceff7d2b6dc091d4ce31418202caed6
SHA512

4ace329c5bce1898b84c0cbf15349e76582b09b39f7c41b1ec1329f288d15d640c7fd80537e8f30666c4a8607d32b556a9eed1dfe910f72b095eb25c83b306d2
SSDEEP

192:3RD6GQoHJD5JNceDmVyQzH72F2RRy9F/8r9hoXlA:3peoHJlJqeDsh32F2RRyDy9mXl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16b2e8c57ddae0a8cf4a82f10ca404af

Files

16b2e8c57ddae0a8cf4a82f10ca404af
.dll windows:4 windows x86 arch:x86

8fa61adf4b05367df7e0b5cfcc36de1f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
GetProcAddress
lstrcpynA
LockResource
LoadResource
SizeofResource
FindResourceA
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTempFileNameA
GetTempPathA
GetLastError
CreateMutexA
lstrcmpiA
GetModuleFileNameA
GetExitCodeProcess
TerminateProcess
WaitForSingleObject
GetCurrentThreadId
GetFileAttributesA
lstrcpyA
GetTickCount
GetLogicalDrives
FindClose
FindNextFileA
SetFileAttributesA
CopyFileA
FindFirstFileA
WaitForMultipleObjects
TerminateThread
ResumeThread
SetThreadPriority
CreateThread
FreeLibrary
SetEvent
CreateEventA
DisableThreadLibraryCalls
LoadLibraryA
lstrcatA
GetSystemDirectoryA

user32

wsprintfA

shell32

ord64

msvcrt

memset
memmove

shlwapi

StrStrIA
PathFindFileNameA
PathFindExtensionA
PathAppendA
PathRemoveFileSpecA

Exports

Exports

LpkDllInitialize
LpkDrawTextEx
LpkEditControl
LpkExtTextOut
LpkGetCharacterPlacement
LpkGetTextExtentExPoint
LpkInitialize
LpkPSMTextOut
LpkTabbedTextOut
LpkUseGDIWidthCache
ftsWordBreak

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 476B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8fa61adf4b05367df7e0b5cfcc36de1f

Headers

File Characteristics

Imports

kernel32

user32

shell32

msvcrt

shlwapi

Exports

Exports

Sections

.text Size: 3KB - Virtual size: 2KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 844B

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 512B - Virtual size: 476B

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 844B

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 512B - Virtual size: 476B