14a115a203296b19190d42fcede2203f411f53864e1e95dc42581595a9cd726f

General

Target

14a115a203296b19190d42fcede2203f411f53864e1e95dc42581595a9cd726f
Size

104KB
MD5

ebc8b5d735942778efbc6b5b6cd8f38c
SHA1

8feef26a029e9497e2ff7feaa0ab4631ec3160c8
SHA256

14a115a203296b19190d42fcede2203f411f53864e1e95dc42581595a9cd726f
SHA512

85616f3b02c985d0c287d15932cd2145124b3d32f56ab7897e16797e4fdb4941999fb86ae9a5782e01705bfd7aa6d9b34dfc7408b820ad8457f4862d5a492e7a
SSDEEP

1536:KXh1ngy5VXsF+X5caQPY7vHZ2QvmGWFo0OFqdLaHLQjt9dqixIiuPfHNLaMNCMKy:q6CVXsF+5TbeGWFo7tHLQR98wI8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14a115a203296b19190d42fcede2203f411f53864e1e95dc42581595a9cd726f

Files

14a115a203296b19190d42fcede2203f411f53864e1e95dc42581595a9cd726f
.exe windows x86

99fdaccf579496d04c798fcfa0d5e629

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
FindResourceA
FreeLibrary
GetModuleHandleA
LoadResource
SizeofResource
LockResource
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
RaiseException
GetProcAddress
WriteFile
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
SetThreadPriority
CreateThread
Sleep
HeapAlloc
HeapFree
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
GetStringTypeW

user32

CreateDialogParamA
DestroyWindow
DispatchMessageA
GetDlgItem
GetMessageA
GetWindowTextA
InvalidateRect
TranslateMessage
SetWindowTextA
SendMessageA
PostQuitMessage
PostMessageA
LoadIconA

winmm

waveOutPrepareHeader
waveOutOpen
waveOutClose
waveOutReset
waveOutUnprepareHeader
waveOutGetPosition
waveOutWrite

Sections

.text
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

99fdaccf579496d04c798fcfa0d5e629

Headers

File Characteristics

Imports

kernel32

user32

winmm

Sections

.text Size: 44KB - Virtual size: 42KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 8KB - Virtual size: 33KB

.rsrc Size: 44KB - Virtual size: 108KB

.text
Size: 44KB - Virtual size: 42KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 8KB - Virtual size: 33KB

.rsrc
Size: 44KB - Virtual size: 108KB