16af1a774a5f4d251c6bb4a1ab43eb7a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16af1a774a5f4d251c6bb4a1ab43eb7a
Size

208KB
MD5

16af1a774a5f4d251c6bb4a1ab43eb7a
SHA1

eda46e89f922afd118a4a07a78328fcefe64a216
SHA256

0879b43f16ca11274fbe5c66eb66b776cf8676453bd475c9a1fe6408eb249f62
SHA512

edbc6ae2f4a2916466cf1873bd8d6f8d39f0ceab6ef3bd0b118f9d7fcef7d12884698267dcda5bbc28e395fa1d111ab19401a26bcf06d2a51c79146d035bc6af
SSDEEP

6144:NlNgwgDBxmkh0VgRkEk2No25aRjUlIP8Fy64:lhC6kh0Vckn25iUlRy6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16af1a774a5f4d251c6bb4a1ab43eb7a

Files

16af1a774a5f4d251c6bb4a1ab43eb7a
.exe windows:4 windows x86 arch:x86

691f1193f16065947032ace3a2329e55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvcrt

fabs

comctl32

InitCommonControls

user32

IsChild

gdi32

BitBlt

ole32

CoInitialize

shell32

ShellExecuteExA

shlwapi

PathQuoteSpacesA

Sections

.MPRESS1
Size: 203KB - Virtual size: 752KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE