5f14e0a74a5def04841c118239277ced | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5f14e0a74a5def04841c118239277ced
Size

85KB
MD5

5f14e0a74a5def04841c118239277ced
SHA1

9b0ad02ff366df8d421042d4e1c4cb648e4086f0
SHA256

65541062d2171b03bdb97fc0095fcb915a344bb18c566f24dadf0b0c5cbe92e6
SHA512

97976471a52295c6cc5383516137625d765e6daeb6ceaac9c01da9167c548f510c989604283e4fc481ba1adbac4327cd12b7a528286b556af789e1e58fa2ad5d
SSDEEP

1536:2oyft4bip/+gpE0tPSekRkTZl4iBcuGMTsjJDjez4wuZoGz6j:Iftjp/+USdRYqvMTWDKUwmoGW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f14e0a74a5def04841c118239277ced

Files

5f14e0a74a5def04841c118239277ced
.exe windows:4 windows x86 arch:x86

cf64356c6ba8cf2d69bd3efb09f5319a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
GetWindowsDirectoryW
lstrcatW
CreateFileW
DosDateTimeToFileTime
GetWindowsDirectoryA
lstrcatA
CreateFileA

advapi32

RegOpenKeyA

Sections

.data
Size: 512B - Virtual size: 748B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 263KB - Virtual size: 262KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ