716b2d632f7527d2bfc343df69a6528e | Triage

Sharing

General

Target

716b2d632f7527d2bfc343df69a6528e
Size

140KB
MD5

716b2d632f7527d2bfc343df69a6528e
SHA1

d7554cd7437bd499a9b2092a3050fea9eb500e1c
SHA256

05a8cd10fbda0d8f4f2c9ab8058b03fac67ab1e5fc106b8157fbea560d78d5fb
SHA512

a2f7bab330ca0c2421bc0c880a74c2d143aa6e876a769e4b3b924071a8ae9f30ea22bb40d2cdaaa1c89d7587dfc71658dabdd5d3c0b3e7e472db6becfc9346f4
SSDEEP

3072:9/Zmp9Hrsf3WVfcJh2PYG2Ai/n27uEwrL:hobHrsf7h2Pn2AiO7P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
716b2d632f7527d2bfc343df69a6528e

Files

716b2d632f7527d2bfc343df69a6528e
.exe windows:4 windows x86 arch:x86

827842dad887624a0535a13d925f1cab

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CopyImage
DrawTextW
LoadCursorA
CopyRect
DrawIconEx
IsWindow
LoadMenuA
GetFocus
InsertMenuA
GetDC

kernel32

FindFirstFileA
DeleteFileA
OpenFileMappingA
WriteFile
GetConsoleMode
GetFileSize
GlobalFree
SetLastError
ReadFile
DeleteAtom
GetFileTime
GetLastError
GetCPInfo
CreateProcessA
ReadConsoleA
OpenFile
DeleteFileW
GetCommandLineA
FindAtomA
Sleep
GetComputerNameA
ExitThread
CreateThread

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 83KB - Virtual size: 16.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 111B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 765B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ