16d912416383529893c92b81b7332add | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16d912416383529893c92b81b7332add
Size

332KB
MD5

16d912416383529893c92b81b7332add
SHA1

a254966a530895f333ee1067443d19ba822859a1
SHA256

27ffcd343adcdc5d65d9eb5b98fa6efa7ec50127e525ee28bbb5ad69edd6c20e
SHA512

dbdfa8790cbab863bf97de1b681cc4c1ea3061494df10446783c908aab54386b8a88237ab2def749234a0492aa93f7fb335f99656bbe6d756f5a3d5798a08f7e
SSDEEP

6144:bf5hKOarnS5UlKqz1+1g30sIFLytBUKw65Y9eIYw5C5Z8E5IOdgspZaUl:bfeOarnS5UlKqz1yg30s6LiBUIQYw5ef

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16d912416383529893c92b81b7332add

Files

16d912416383529893c92b81b7332add
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.Kaos2
Size: - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Kaos12
Size: 324KB - Virtual size: 324KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pe2
Size: 22B - Virtual size: 22B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mmym520
Size: 74B - Virtual size: 74B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 628B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ