114142f27f7c3b8ac75e15b68e825581 | Triage

Sharing

General

Target

114142f27f7c3b8ac75e15b68e825581
Size

80KB
MD5

114142f27f7c3b8ac75e15b68e825581
SHA1

ffec54641a5c6eb84470c9ca3d15ccca7f85205c
SHA256

50f197b7cdc6c9f7d783f803ae8a2b72bc86a1abd425ab5db55012f77e4e6deb
SHA512

febd58f94334a49826287c0d6a8cb25f38f79ea2d0a10ec8ccd4a6e2be8fd3d3abb109f1f6b76f5aecc2324b07f28aebe4a8dbc7482228c1eb45a1931a7c05f6
SSDEEP

1536:TGNAc8g3n78zfmtgxIwXnX34rku0ZrqhXxiwiI82hW8fPL:TGN38gr8zfzxIwXXzZi8vYL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
114142f27f7c3b8ac75e15b68e825581

Files

114142f27f7c3b8ac75e15b68e825581
.exe windows:4 windows x86 arch:x86

523199129e67d10716f3f4766b556e76

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LZClose
EnumCalendarInfoExA
EncodeSystemPointer
GetTempFileNameW
IsBadHugeWritePtr
SizeofResource
Process32Next
CreateProcessInternalWSecure
TlsFree
InterlockedDecrement
GetThreadContext

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE