16b3aeb6659a6c8f8cf977fab4fd89c9b1e27d37a1af68e6d4883895bd5399bc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16b3aeb6659a6c8f8cf977fab4fd89c9b1e27d37a1af68e6d4883895bd5399bc
Size

7KB
MD5

92d5a37b77dd85f0c10ba9e4eaf989e9
SHA1

213d0dd380943a38ab7e90460b4a60a3df1b1449
SHA256

16b3aeb6659a6c8f8cf977fab4fd89c9b1e27d37a1af68e6d4883895bd5399bc
SHA512

722ea112d10b50c52c10103c08a67f6668de3dac9a6bd53c965518788e792015f583faadec0f6a82ed193a016f2df8bcf44edc56b70ebcfc51c0cc543ecb4b9d
SSDEEP

96:FkNMGvilscsQU7Wpp1sF30+cwR4J8nse1YctPDx+nSD:FkNMGxChFa3PlDx+S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16b3aeb6659a6c8f8cf977fab4fd89c9b1e27d37a1af68e6d4883895bd5399bc

Files

16b3aeb6659a6c8f8cf977fab4fd89c9b1e27d37a1af68e6d4883895bd5399bc
.dll windows:5 windows x86 arch:x86

a330ab4571994ddebf91be7a95f5c0d5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
GetTickCount
Sleep
CloseHandle
CreateThread
lstrlenA
DisableThreadLibraryCalls
GetModuleHandleA
CompareStringA
InterlockedExchange
RaiseException
FreeLibrary
LoadLibraryA
GetLastError
LocalAlloc
GetProcAddress

user32

wsprintfA
wsprintfW
MessageBoxIndirectW
SendMessageA

msvcr90

memset

Exports

Exports

winampGetInModule2

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ