16489cf48bc150f1e4f8d7d6ab756e832720023c25ecc00581a1ecdb9d125241 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16489cf48bc150f1e4f8d7d6ab756e832720023c25ecc00581a1ecdb9d125241
Size

1.7MB
MD5

a8ce5ecdb8ff390e4b9ed9e7ba2a161c
SHA1

78af81bd01140f20558a2b24fc962f7bfb002b1a
SHA256

16489cf48bc150f1e4f8d7d6ab756e832720023c25ecc00581a1ecdb9d125241
SHA512

b543a117be4d670d0e7751d9170ecbbd8df294626c1cc184d8c8f95e0a82e28ba4406d233b01376c21845b043b71a88b9fcb5a5c4022b12ad74f34f775a9678d
SSDEEP

24576:Pqfj/pKWIEcpP2WtjiLjrjCv8AAaIJr2CuLpZ6dqCevofVOhZjgw9pmF8wQOToDX:yU1u5yvZABRgNgECevvsc/wQO0Dx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16489cf48bc150f1e4f8d7d6ab756e832720023c25ecc00581a1ecdb9d125241

Files

16489cf48bc150f1e4f8d7d6ab756e832720023c25ecc00581a1ecdb9d125241
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ