16eea191cb05a087abd6eada0f118826 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16eea191cb05a087abd6eada0f118826
Size

368KB
MD5

16eea191cb05a087abd6eada0f118826
SHA1

06658f6f135fea0fdb4fd4e66d167a77cab53f99
SHA256

3e7eb42d94b24ba396fe6e3952c85fbf848ac8639e3f040dac061de47cc488de
SHA512

2c371db5cd0850d6ff09008e857952e5c764d9574fe135ef0d44422bcbaefbe4b389ad5b586b8d6119dc0a3753bc7cf9b792a3bc3fce6870607685398d3da85e
SSDEEP

6144:k3DpJLVfQ0UqLsSaJsttGR9hSapvfIyyWBQUya/fNyOqvdE1VDE:k3D/LVfdUqmJst4R9hXfIyB99gen

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16eea191cb05a087abd6eada0f118826

Files

16eea191cb05a087abd6eada0f118826
.exe windows:4 windows x86 arch:x86

5a498eee87e4d89512a84502f500181f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA

Sections

CODE
Size: 290KB - Virtual size: 820KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ccg
Size: 67KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE