14b125fe3828d6cc9d1122f708eb67bb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14b125fe3828d6cc9d1122f708eb67bb
Size

133KB
MD5

14b125fe3828d6cc9d1122f708eb67bb
SHA1

f6e8e6fb09f9bff985d151184ce1e4104b4eb54b
SHA256

b0e177ea0eb695e35f36bf8bc7b2b00bd466cf6c8a280b167cbcb29c2c125662
SHA512

a3741b62d2853b2a0351a670df2dee2a24ad60ed6929f3c64769f45c6137c41ff50d41fd0302c453059996f5ee2edb01d6d8e4731a3b98c365a26a96d27f9f09
SSDEEP

3072:S1ZFj37ntz8Vv8VLbv7MAOK2AXTAkMy4igTaEa75:S1/D7Z8t8BvQA3zfL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14b125fe3828d6cc9d1122f708eb67bb

Files

14b125fe3828d6cc9d1122f708eb67bb
.exe windows:5 windows x86 arch:x86

8800d15317235ed911a2c4def2f2e45e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathCompactPathExW
ord29

gdi32

GetPixel

kernel32

lstrcmpiW
GetModuleHandleW

Exports

Exports

?BingoGetOut@!PEH_KK:X

Sections

.text
Size: 26KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.irda
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ