14c70f4c52593566b2725a9e6e078b7e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14c70f4c52593566b2725a9e6e078b7e
Size

31KB
MD5

14c70f4c52593566b2725a9e6e078b7e
SHA1

4b6f34ab3e205060369d00f5f564b7cfc4b8736d
SHA256

52aa06efada05b37953c650d216a12f7afcb90b1060e2e400d4f0841e1a1ec4b
SHA512

f02d99bb7b00404d96f7c44ef729d61f361d8305d50ac922f5f1357be67f1cfc87175b39dab1a999f3306de31650daa87022863d9244ec11c4fb7f5e49f97279
SSDEEP

768:KEdef6PAs68pfZP04YsubvbtbKxHVCZRSLiDSFDh/aSk1v8kc:KEdeiPfJxYfK86GmDh/aekc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14c70f4c52593566b2725a9e6e078b7e

Files

14c70f4c52593566b2725a9e6e078b7e
.exe windows:4 windows x64 arch:x64

b0f3492c324d8b1b540ae9c889a2bb3d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvcrt

fabs

ole32

CoInitialize

shell32

ShellExecuteExA

shlwapi

PathQuoteSpacesA

user32

IsChild

gdi32

BitBlt

comctl32

InitCommonControls

Sections

.MPRESS1
Size: 26KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 884B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE