16ab8ea3a729b6ce0fc789111f197d04 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16ab8ea3a729b6ce0fc789111f197d04
Size

41KB
MD5

16ab8ea3a729b6ce0fc789111f197d04
SHA1

c82d8684bba9f1a158b197538976d3b84d063feb
SHA256

4c74c44a6e9eaaad51e5eb8fe4a8f527616430e86d005877b372db5576807aae
SHA512

5ee1389eed4a428316698fd67f68bb9eac2e54a38398217b5b8d4b522c4183c573b06aff70b2f5617b3e47bb0458c2e10770bce296ae388c15373a1822ef00f9
SSDEEP

768:IqdsIYQMaxDtAScunEkVUtUorh6TfmXzZfM353oquwdUIXJ:IQQQFpyS0bMTfCzcawxXJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16ab8ea3a729b6ce0fc789111f197d04

Files

16ab8ea3a729b6ce0fc789111f197d04
.exe windows:4 windows x86 arch:x86

404591da370d17f799043206b3f61e89

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetShortPathNameA
FindResourceA
FreeEnvironmentStringsA
CreateWaitableTimerA
WritePrivateProfileSectionA
GetDiskFreeSpaceA
GetCPInfoExA

user32

TabbedTextOutA
AppendMenuA
GetWindowLongA
TranslateAcceleratorA
IMPSetIMEA
GetPropA

gdi32

EnumFontFamiliesExA
CreateColorSpaceW
CreateFontIndirectA
GetCharWidth32A

Sections

.masm
Size: 33KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fasm
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fasm
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.masm
Size: 1024B - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ