16de4f2bb15f40f28bbe94dca2bf88fc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16de4f2bb15f40f28bbe94dca2bf88fc
Size

65KB
MD5

16de4f2bb15f40f28bbe94dca2bf88fc
SHA1

b2c7585424ef4cce1ffdf389d7eacda511a0918f
SHA256

661030e74927f34958b192807d00987c26743b35f4d475c0f4f49ccb23a63dba
SHA512

eb19996638b720327821ba53699d435c8c0ddeefec5c1a70330efc15d59efbed9ba2781d48b823a02d86723425f5a851554c4eb09f05287270a21676231096ce
SSDEEP

1536:X5jfPJ8VgcKsAnuW6geKuwPmfxLFugBMLMP:XdfaKcKsAnuWxqwmf5FuiYu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16de4f2bb15f40f28bbe94dca2bf88fc

Files

16de4f2bb15f40f28bbe94dca2bf88fc
.exe windows:4 windows x86 arch:x86

a032161a3653d6e00bd2f895c459a95e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
GetExitCodeProcess
CreateFileA
TlsGetValue
CloseHandle
LoadLibraryExA
DeleteAtom
CreateMutexA
TlsAlloc
GetModuleHandleA
GetEnvironmentVariableA
FindResourceA
SetLastError
GlobalUnlock
GetProcessHeap
GetCurrentThreadId
lstrlenW
ReleaseMutex
GlobalFree
GetStdHandle

user32

CreateMenu
GetDlgItem
DispatchMessageA
GetCaretPos
FillRect
GetDC
IsWindow
CheckRadioButton
DrawMenuBar
CallWindowProcA
SetFocus
DrawEdge
CreateWindowExA

rsaenh

CPHashData
CPDecrypt
CPDeriveKey
CPGenKey
CPSignHash

msasn1

ASN1BERDecEoid

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 50KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE