16e75ac18368b7b281814719224389dd498d701fe4904c55db189cf39ec1f473 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16e75ac18368b7b281814719224389dd498d701fe4904c55db189cf39ec1f473
Size

2.0MB
MD5

258a84e7fd82ab92db06de71d9242be1
SHA1

f5b6ff26fd4137b029fa8dcc9c5bf5380eae0c3a
SHA256

16e75ac18368b7b281814719224389dd498d701fe4904c55db189cf39ec1f473
SHA512

899c04b05df052e0c57e3f77678bd258637de3e720038b1e44fea485ab3baf511e342834b0f255a7edcddc7f440cd21cfcfc43de8aff49164a68e2a01062c244
SSDEEP

49152:744kAJNkWbddLbWxMNzUaDsmH8yONYNrAwVw8e7+2iiPcGkH:73VNkWP5lUA8yHnebiibm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16e75ac18368b7b281814719224389dd498d701fe4904c55db189cf39ec1f473

Files

16e75ac18368b7b281814719224389dd498d701fe4904c55db189cf39ec1f473
.exe windows:6 windows x86 arch:x86

450dbda80700e669996fab3b5fd48e53

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

DispatchMessageW

shell32

ShellExecuteA

advapi32

RegSetValueExA

Sections

.text
Size: - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 646KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ImO
Size: - Virtual size: 592KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.X%?
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.n?"
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 364B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ