16f83a8eb8cba355cce8d3b6e1a3e6b1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16f83a8eb8cba355cce8d3b6e1a3e6b1
Size

3.6MB
MD5

16f83a8eb8cba355cce8d3b6e1a3e6b1
SHA1

60d6abf044eba7208ba8cb8354b8555ee27946e3
SHA256

23fc91bec2f503598747aeab559baa5289ed0d9b40e0b0f7732b751ad7916b01
SHA512

8278bac5227ec32db0e8877e2cec2513fdb4a64f826b3557c3484ca9acd8f8c3478a05346241fb786b88e6923965f89d2e302a9f50281f5dbf8fb8111ab6a859
SSDEEP

98304:dk/Q8Juk9hG4FP1RRavH/Wyssk7rtIh6NqaK:d+uqGSc3Hssk7rt5rK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16f83a8eb8cba355cce8d3b6e1a3e6b1

Files

16f83a8eb8cba355cce8d3b6e1a3e6b1
.exe windows:5 windows x86 arch:x86

baa93d47220682c04d92f7797d9224ce

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpy

comctl32

InitCommonControls

Sections

Size: 718KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

zhhrpxvg
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ylpuuolb
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.taggant
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE