14455841887a27d1bfcce0f949f6fd21 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14455841887a27d1bfcce0f949f6fd21
Size

83KB
MD5

14455841887a27d1bfcce0f949f6fd21
SHA1

ba47631df9088b698763b427bc370d6cf0d39e8d
SHA256

909e300f0d3b2611859bbdab1821f1f6e92025772ac314eb3c55cfef98247120
SHA512

3af911a071bd8137dc46e9d91cc06ec9312924ba34ced3efb25875b07c48675f9e9da893d58b096a65431c8cbb276d3f43b3635bdcc40ccd74e8cde0dc83b5a5
SSDEEP

1536:H0tbaQEIrR6oVPapxOkNI/bgyiR59K83GDfGY5+592iOyjEErxTWDTMqhGKYIZTE:UBxmoVPa2k4bosxKY5mvbjBkMqhGKZTE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14455841887a27d1bfcce0f949f6fd21

Files

14455841887a27d1bfcce0f949f6fd21
.exe windows:4 windows x86 arch:x86

4cf05354e7d4f8ad84f732ebf588baf6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DebugSetProcessKillOnExit
GetThreadLocale
CopyFileExW
TransactNamedPipe
GetThreadTimes
TerminateThread
FindResourceExA
EnumResourceNamesA
CheckNameLegalDOS8Dot3A
GetFullPathNameW
LockResource

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE