16237da7869128773455532b43fa1387 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16237da7869128773455532b43fa1387
Size

56KB
MD5

16237da7869128773455532b43fa1387
SHA1

bd5fdfd70d406367cd2b1e36998a2ccf000ea849
SHA256

2d1fe181da0c66e7c2c2dae1172ab78cfe09231620c26aca511a1b991c3e9542
SHA512

4a14b3eb5f655e8c0475f02c4a7fd8d25ff4fa1637278777d8d898d1e9e6f00ad75b54e98f3d4c6cb8c4f5470fad81fe72b101464be197ed5bbd8c2905c43728
SSDEEP

768:0CpUCAk6T9wAFBQPGO5ilXDma74slOapQ1rkxbrds5NtdXE6XVuSSBMLM4on:Bp9jRRlilaa743apQuxXertdXnYBLn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16237da7869128773455532b43fa1387

Files

16237da7869128773455532b43fa1387
.exe windows:4 windows x86 arch:x86

6b7b0a843f48bd0b1c216e303a39cd3f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetCurrentDirectoryW
ReadFile
GetModuleHandleW
GetLastError
LoadLibraryW
CreateThread
GlobalFree
LockResource
GetPrivateProfileStringW
GetModuleFileNameW
GlobalAlloc
GetDriveTypeW
MoveFileW
GetVersion
SetWaitableTimer
CancelWaitableTimer
FindResourceW
SetEndOfFile
LoadLibraryA
WriteFile
GetCurrentThread
GetProcAddress
SizeofResource
DuplicateHandle
GetUserDefaultLangID
FindFirstChangeNotificationW
VirtualAlloc
FindResourceExW

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE