16ceff72a784e4f9e7f85d08fea2fef5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16ceff72a784e4f9e7f85d08fea2fef5
Size

514KB
MD5

16ceff72a784e4f9e7f85d08fea2fef5
SHA1

3577dc365aefbd6cb8fcfa1b4141517c2446f9c4
SHA256

40e8f2f41bc6b8a2daebe0816ad1f791215ad819d2ee81dec31958cef1c392d6
SHA512

c8096f939819f8c3f571a387792fee69db86a70463ba66aaae9cca546090eff93d38ad70756ef6710c69f6ba4d5da9e3a2c1e38e0895b9e1bcbbda22d8792455
SSDEEP

1536:CeBHWRr5vAtmFU1g9XTQ7h7lravK2Xw2RbFDJV7zuompJgTtG7bEIUYMHtU2CI2P:pBU5vA4S/jEbFDSEsWt3CfvVipcl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16ceff72a784e4f9e7f85d08fea2fef5

Files

16ceff72a784e4f9e7f85d08fea2fef5
.exe windows:4 windows x86 arch:x86

b940cadb80c6ab17c0d6c9725b30af77

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FormatMessageA
GetLastError
SetLastError
VirtualAlloc
CloseHandle
MapViewOfFile
CreateFileMappingA
VirtualFree
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
GetModuleFileNameW
UnmapViewOfFile
HeapFree
lstrcpynW
GetFullPathNameW
SetEnvironmentVariableW
HeapAlloc
GetProcessHeap
GetFileSize
ReadFile
SetFilePointer
CreateFileW
WideCharToMultiByte
Sleep
MoveFileW
GetSystemTimeAsFileTime
DeleteFileW
lstrcpyW
lstrlenW
GetEnvironmentVariableW

user32

MessageBoxA

Sections

.text
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.res
Size: 506KB - Virtual size: 4.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE