14cf4731a91bd4e8605d0b7fe1fa68a5 | Triage

Sharing

General

Target

14cf4731a91bd4e8605d0b7fe1fa68a5
Size

227KB
MD5

14cf4731a91bd4e8605d0b7fe1fa68a5
SHA1

7cd06ad2115aa388baf92a50aaa95984034825b3
SHA256

e29a8e13bf18ec51c7dc399c175b223669fc61ddab45139957619659d1a7ebd9
SHA512

e38b2d13cff87669f2b0e08ff61ed45bd46c4f7b833070983b5370c7511d62b432961505170f3dcc6471054cc21298e27c842d11849c9048d5b2e4a81c77e04b
SSDEEP

6144:Bb1uHXrWD2FOPW64TLABx8ZjEYljrGEJ:d1SuoOycB0flWE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14cf4731a91bd4e8605d0b7fe1fa68a5

Files

14cf4731a91bd4e8605d0b7fe1fa68a5
.exe windows:4 windows x86 arch:x86

201b62e0af2aa62af5a8f23420392b53

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CoTaskMemAlloc

comctl32

ImageList_SetIconSize

vlhook

UnMap

Sections

CODE
Size: 217KB - Virtual size: 712KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE