816abdd8b9bc23b671014a083c7020621609547d5cfb4af97f50213f465a2f0c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

816abdd8b9bc23b671014a083c7020621609547d5cfb4af97f50213f465a2f0c
Size

49KB
MD5

08b3bdf3d34a3509b44ec229b4b0acda
SHA1

495965c396a106fba8eaf0753a500a217d3015a9
SHA256

816abdd8b9bc23b671014a083c7020621609547d5cfb4af97f50213f465a2f0c
SHA512

a6bfd12d47d25fe7d88605339acde0d871bf29db6b468cd98c686a06f47d258257136a608be2771dedbf0bb6a7cdde7832782db36bbaa1296aa44e835a4e7bc5
SSDEEP

768:dD2oV2AJblQRNLzFrSNTVebqxjxMQhMk6CrpZRY1:dCoVXGRTuhBxj/hHBY1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
816abdd8b9bc23b671014a083c7020621609547d5cfb4af97f50213f465a2f0c

Files

816abdd8b9bc23b671014a083c7020621609547d5cfb4af97f50213f465a2f0c
.exe windows:5 windows x86 arch:x86

3e262236e65f95b01f5c11555a1db856

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PostQuitMessage
DefWindowProcW
UpdateWindow
LoadCursorW
DispatchMessageW
TranslateMessage
GetMessageW
CreateWindowExW
RegisterClassExW
ShowWindow
PostMessageA

kernel32

FindClose
DeleteFileW
CreateFileW
SetFilePointer
ReadFile
GetStartupInfoA
GetModuleHandleW

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ