16a11691ffe6487b864215b522902af1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16a11691ffe6487b864215b522902af1
Size

396KB
MD5

16a11691ffe6487b864215b522902af1
SHA1

9881b53949ef1a89aa4bbdc8c85ced1a06a0b4a3
SHA256

1ceae7a158a1c5f43ad1c4190abe4b3850dcdeb961492f9ae614e6f093ccba7c
SHA512

e95447e566587a1a41525186205df8cec72729ba45c622c44311e38c82d5db3604fe027308a3a4e8ec20b5df2d42fb1e6940366f03c2c0f29d82bfa68eb3041c
SSDEEP

6144:pQMirGyGQBBVOJnptAHDKKo/VaShM4D4JzVPHd6DSNNTXWGCD2:orBxsptlK8D2JPHcGHXWV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16a11691ffe6487b864215b522902af1

Files

16a11691ffe6487b864215b522902af1
.exe windows:4 windows x86 arch:x86

b8aebed9ae2d49aed12945300abecd3e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTime
ResetEvent
GetComputerNameA
LocalFree
CloseHandle
CreateFileW
PulseEvent
GetCurrentDirectoryA
GetTickCount
lstrlenA
GlobalUnlock
LoadLibraryW
CreateThread
GetModuleHandleA
lstrcpyA
GetCommandLineW
UnmapViewOfFile
FindClose
HeapCreate
Sleep

user32

GetDlgItem
DrawEdge
CallWindowProcA
CreateIcon
FillRect
CreateWindowExA
GetCaretPos
SetFocus
DispatchMessageA
GetDC
DrawMenuBar
CheckRadioButton
IsWindow

cryptui

CryptUIDlgSelectCA
CryptUIDlgSelectStoreA
WizardFree
LocalEnroll
CryptUIDlgCertMgr

appwiz.cpl

ConfigStartMenu

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 396KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 371KB - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ