14486dc10962dcedff110c0b4f25f71a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14486dc10962dcedff110c0b4f25f71a
Size

177KB
MD5

14486dc10962dcedff110c0b4f25f71a
SHA1

5c34638450d754527874628430995ef2e0a00018
SHA256

752141413b7bb18110ee8d38cd6352907b59149a2d4907e69942bd528f331afc
SHA512

6571daf9fa14c8ae90591389a1ac611588deb131f9cd04c74e52d021e3318035339cb41f79f7780b3290f64c9a87d717f45466d6459c1d5c55e4906d4fd2cffb
SSDEEP

3072:RFoeFeBqnjPfC5y341SUND3iG8VeHfEA1FUADVILis+rInvB3c/EVL/tfkg7Bjq2:RJFeOPfC5LSUwGEeHf1pI+lrQ2itfkgx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14486dc10962dcedff110c0b4f25f71a

Files

14486dc10962dcedff110c0b4f25f71a
.exe windows:4 windows x86 arch:x86

864f557d7d233cb06495b14efaaf7e9e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

CM_Get_Depth_Ex
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

shlwapi

PathAddBackslashA

winmm

mciSendCommandA
sndPlaySoundA

kernel32

GetVersionExA
TlsGetValue
GetFileType
GetEnvironmentStrings
AddAtomA
GetLocaleInfoA
SetLastError
GetSystemInfo
InterlockedExchange
TerminateProcess
GetStdHandle
TlsSetValue
HeapCreate
GetEnvironmentStringsW
GetStartupInfoA
VirtualAlloc
EnumResourceNamesA
SetEndOfFile
TlsAlloc
IsBadWritePtr
IsBadStringPtrW
GetCurrentProcess
SetHandleCount
TlsFree
FreeEnvironmentStringsW
GetACP
VirtualFree
GetModuleFileNameA
FreeEnvironmentStringsA
HeapSize
UnhandledExceptionFilter

Sections

.text
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ