114418f5008cc6cbfe5aaa35d843fd4c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

114418f5008cc6cbfe5aaa35d843fd4c
Size

209KB
MD5

114418f5008cc6cbfe5aaa35d843fd4c
SHA1

e3a62aa43c4ff0ea7bcf1c3d0fbcc13416e032b8
SHA256

139662ecbb7b216a2f26cd5bcefe09611442637bf590c9dcfbed9d98fa8f8151
SHA512

3945ef17d3071226a039c70169e8cde1052c19db0fd736104c73d72ad144d0f5852c0b74cdc95f50c1d30c43f25e958e9a377b645f00a0d32139143a03249324
SSDEEP

6144:Al2/rroDhDUv49i0fHh3rynEBjxSGNGJVbZqBe9oSVILM:pI+vUb3rEETFuVFqMbIL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
114418f5008cc6cbfe5aaa35d843fd4c

Files

114418f5008cc6cbfe5aaa35d843fd4c
.exe windows:4 windows x86 arch:x86

691f1193f16065947032ace3a2329e55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvcrt

fabs

comctl32

InitCommonControls

user32

IsChild

gdi32

BitBlt

ole32

CoInitialize

shell32

ShellExecuteExA

shlwapi

PathQuoteSpacesA

Sections

.MPRESS1
Size: 204KB - Virtual size: 752KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE