014310329631db415379a4fb2265b304 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

014310329631db415379a4fb2265b304
Size

1.0MB
MD5

014310329631db415379a4fb2265b304
SHA1

2b564f17b4753030bc59e2d7061b84b59a715ab9
SHA256

211c5b7692a6be9edae439c10928309e39d68d76fce41aa90fab14ca8009c0af
SHA512

89f3be049d700ef3c936a9560221974f87384d609453f1b03150ce8c683c21b2c82940fdb26d56cafc33d3371bd965f2d45ad7256c16cc65629fbea1e629b2a2
SSDEEP

24576:WR/bhJMMJbUilpjzxqrubQgKzqH7B896A:WR/bjPhlpvxCubtKK+9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
014310329631db415379a4fb2265b304

Files

014310329631db415379a4fb2265b304
.exe windows:4 windows x86 arch:x86

aa8beab36a1542962b462bed9ea345e9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
CloseHandle
GetLastError
GetStartupInfoA
GetFileSize
CreateEventA
LocalAlloc
GetVersionExA
GlobalAlloc
lstrcatA
LocalFree
GetModuleHandleA
lstrlenA

gdi32

DeleteObject
GetObjectA
BitBlt
ExtTextOutA
GetTextColor
GetTextMetricsA
CreateSolidBrush
PatBlt
CreateCompatibleDC
LineTo
GetBkColor
GetStockObject
MoveToEx
SetPixel
SetROP2
CreateFontIndirectA
GetPixel
GetDeviceCaps
GetTextExtentPoint32A
SelectObject

Sections

.text
Size: 512B - Virtual size: 487B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.0MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ