114d93b412a580adda804d790c4091de | Triage

Sharing

Copy URL Twitter E-mail

General

Target

114d93b412a580adda804d790c4091de
Size

100KB
MD5

114d93b412a580adda804d790c4091de
SHA1

7b68f785d0eba138d7244c07652e9b7c699cd6b1
SHA256

cf2e811f0094a901089d74b186b64d5470b8ac14bbef792ecf07afd0296ae230
SHA512

e7cbadde9f7e7b458d31ab00b6a89bc6424f887d9c56b555c4abbd5cbc2e56c0beafb53a271edd0dddecce84da22a9925e15e730b3c15a73dd5b352a7a2d0c90
SSDEEP

1536:XoNnpNd0JbYz90i4a0uLcJiw4ITgISn+2rdVWeIdoNY6uxuQCGPnUFXtLg:Xinp0/i4vJ/4GHWz0uY6uxu7u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
114d93b412a580adda804d790c4091de

Files

114d93b412a580adda804d790c4091de
.exe windows:4 windows x86 arch:x86

2eda502d39734c2a70c5e0d029966397

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
ExitProcess

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 93KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE