c16abb5b9e4d3f99f870946dba9b0f86 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c16abb5b9e4d3f99f870946dba9b0f86
Size

116KB
MD5

c16abb5b9e4d3f99f870946dba9b0f86
SHA1

c2f9bc04b15af7c738bb79b4a79922dad367fc26
SHA256

1e25383c7e4f9815ed13a74e6bc8cfe6141149474b6baa77cf48fb37b2d91415
SHA512

6e77818c94d3ab80584373397552c16276dfed43b420179a8944fa897ae93cc45108b92099d0a2e64173e1bb8cf60e7d4897cc5d34f6cc7bcf41a3ec54e81e51
SSDEEP

3072:Vsdb3iOvcSw8A8Af4ZtR+3mFQC0d2RMbCCXAB:MWCcSMf4ZL+3GQxuOra

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c16abb5b9e4d3f99f870946dba9b0f86

Files

c16abb5b9e4d3f99f870946dba9b0f86
.dll windows:4 windows x86 arch:x86

d71ff74ccfe699004afc74c243196b27

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

4fbdsv984o.pdb

Imports

advapi32

AllocateAndInitializeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetFileSecurityA

version

GetFileVersionInfoA

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 574B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 468B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ