14b026b8826233b40549878c55fe7c630f70c26044c44accbe90c425e6c6a075 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14b026b8826233b40549878c55fe7c630f70c26044c44accbe90c425e6c6a075
Size

5.3MB
MD5

55174a8f970b868f3e03a119b041a097
SHA1

96fce4bc1a0d4f026802a07284af6e807d91bcdc
SHA256

14b026b8826233b40549878c55fe7c630f70c26044c44accbe90c425e6c6a075
SHA512

1e0038d5d698663fc70715a286156e729d792a13c207eda5ba070d8a70aa073be91c10dc9133e51ff428c0fddcb2099ee0c9c5f92073067fa62a5e111fdda523
SSDEEP

98304:R62qd0r/sVzDvbzUr/+bY6wXeXrTHOELJPNSTPs:R6R0QNvorydrj9PQTPs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14b026b8826233b40549878c55fe7c630f70c26044c44accbe90c425e6c6a075

Files

14b026b8826233b40549878c55fe7c630f70c26044c44accbe90c425e6c6a075
.exe windows:5 windows x86

3156b2a60e7974726c47e22c127553e4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

lstrcatA

user32

DefWindowProcA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

advapi32

RegQueryValueExA

Sections

0
Size: 4.4MB - Virtual size: 4.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 871KB - Virtual size: 872KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ