14d042d32e3d0834184dc775b24819fb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14d042d32e3d0834184dc775b24819fb
Size

297KB
MD5

14d042d32e3d0834184dc775b24819fb
SHA1

f87d3a0216755c515be15ae5986adfbabe238bcb
SHA256

70fd76f55224f661c686bb94f36627e2d30d7c2f206433d95b9d1ef1f7c22ba6
SHA512

bb141a1c40a438b1b4354eebdff599fc50d627c33d83a8072bd84a915c9be8ffc326a74a3b4ee8ab644266f1c7256aa9e230072759cdeceda7bfcd54512c4590
SSDEEP

3072:Lpe7xPXUomWqLEnCYvcvIXRTy1hmUI0xlOcwQIvS3oGcFuG9hFoHk148GzMw1pU/:lAXZvDx8hzNxl8QIvSiFxTO8GzMl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14d042d32e3d0834184dc775b24819fb

Files

14d042d32e3d0834184dc775b24819fb
.exe windows:4 windows x86 arch:x86

8fcf57146ab824bb067bf2896f723f7e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
CreateFileA
LoadLibraryA
GetProcAddress
GetWindowsDirectoryW
lstrcatW
CreateFileW

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 287KB - Virtual size: 287KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ