f14a8a94235bb326514705ad56433f78[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f14a8a94235bb326514705ad56433f78.exe
Size

2.2MB
MD5

f14a8a94235bb326514705ad56433f78
SHA1

1e0ed3e457958127dd63cdb83156da38c7fe3d12
SHA256

5e729d79028a89e0d09789846636f03a2355d6146864a05156b451cb2cf33e6c
SHA512

3d3abeb3f71a812491bea6d3eb09a326b631b66830ca0501e010fda14e0c08f79f9555e0e69f0049b97878cbfe29142743d79930c299059d4774d6be059df29d
SSDEEP

49152:U6/P8XmeNj1g37GG6jWzIJdkJ9IrWdjJEapZq6PB5Q:xomeCBOW8DXAEarZPBG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f14a8a94235bb326514705ad56433f78.exe

Files

f14a8a94235bb326514705ad56433f78.exe
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 5.2MB - Virtual size: 5.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ