16b8ad70b52387f5359cc38b6e236633 | Triage

Sharing

General

Target

16b8ad70b52387f5359cc38b6e236633
Size

8KB
MD5

16b8ad70b52387f5359cc38b6e236633
SHA1

02a6d8bc5d26007f355a3893f1ee653bbf5136d7
SHA256

1ac3aed1a02537aa69f9244cc8048e4ecf4d532414f3be06869241fc9ae0c1ed
SHA512

1b5afa4557398a38befd67bdb2d06fa6e90a06445d0fce93b21480ed126ba7ab7cf81a7900304a326b80eb91b9d63181404cc0885f470ec1e718137735541c09
SSDEEP

192:CwEST3hEBbwzt5s5v133moowOb3+1TbgwTAffbxbfWvPBfeRql:6Szyut5sBmooaTsaArhYPBf3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16b8ad70b52387f5359cc38b6e236633

Files

16b8ad70b52387f5359cc38b6e236633
.exe windows:1 windows x86 arch:x86

1d1ebf53a1f1084fffaa885c2350beb0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleHandleA
Sleep

user32

ChangeMenuA
CreateDesktopA
DdeQueryStringA

gdi32

EnumFontFamiliesExA
EnumFontsA
GetCharABCWidthsA
GetCharABCWidthsFloatA
Pie

shell32

StrCmpNA
StrCmpNIA
StrNCmpIA

Sections

.data?
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ