16bd21204c104fd8396f26870dc25908 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16bd21204c104fd8396f26870dc25908
Size

27KB
MD5

16bd21204c104fd8396f26870dc25908
SHA1

6a43d8d6fdaa7e83f983a6972143c239ada9c072
SHA256

a2e20e7d38071bcb6155c32ef8b692b548beb0eb7c1ad5909c518299a3436709
SHA512

3c56a1703519f0b0c888977945aa6cf823bf8df94bed3ba719933a912eb64a1ab78857686db846ece311a77d699070e0e636e8ee7f05937d43df8b4e0dad9704
SSDEEP

768:WslVBJSr6BZ6mEVp7iqtao6Wnyk8t96g:ZVBQcZXElTFn7E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16bd21204c104fd8396f26870dc25908

Files

16bd21204c104fd8396f26870dc25908
.exe windows:4 windows x86 arch:x86

e9bc94964603cec82e98011bd1fe14c8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareStringA
BeginUpdateResourceA
CreateFileA
GlobalGetAtomNameW
ReadConsoleInputExA
ExpandEnvironmentStringsA
EnumDateFormatsExA
CopyFileExA
CreateDirectoryA
SetLocaleInfoA

user32

CallWindowProcA
SetWindowLongA
WinHelpA
IsCharAlphaNumericW
GetClassLongA
CreateDesktopA
BroadcastSystemMessageA

gdi32

PolyTextOutA
CreateEnhMetaFileW
GetICMProfileA

Sections

.data?
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.share
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 8KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 908B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 676B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ