14e6f866d13d2c3151c8f2338af044e6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14e6f866d13d2c3151c8f2338af044e6
Size

28KB
MD5

14e6f866d13d2c3151c8f2338af044e6
SHA1

ae95a6e283e6d543d6811266eed55ebe598dc59e
SHA256

57d4c67b2e83eb45f06832ee626508b92889d20b2362512686e04c1a4ca486ea
SHA512

645f5cb8e0489a3df3b8ceb9462c5659c274253f6ea722907f0775e486edcc9e0bf37dd2aaab3087b4da5acebc8bf4c1cc26975d3e22f0776eab67aa51fbd08b
SSDEEP

384:xwDAC0uzAsTkCZTQ+Hml+AtydNASyUTEgl:xwDAjuzAsTzs+gyPmgl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14e6f866d13d2c3151c8f2338af044e6

Files

14e6f866d13d2c3151c8f2338af044e6
.exe windows:4 windows x86 arch:x86

e1482dadcf24d4fbc96c3a0668c40380

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumCalendarInfoA
LoadLibraryA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetProcAddress
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetStringTypeW

user32

ShowCaret
DrawFocusRect
OpenIcon
TrackPopupMenu

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE