114ecb55d6b51e448f40b39196d85130 | Triage

Sharing

General

Target

114ecb55d6b51e448f40b39196d85130
Size

15KB
MD5

114ecb55d6b51e448f40b39196d85130
SHA1

313f52a7e1083d7ef331dff775f5efc6c15595ae
SHA256

42bf4ea724020ee298a93b911b2864ad1c9903944df1de1320b90a0632e56156
SHA512

bc973606cb0d00aff685ffdfeef232ef74233f1325d7739d0df64570b988a30a5e7cedfdcd3d2f54db8f033c2effa888fa2e1a320704ff7fc5ff91c9e8feac58
SSDEEP

192:oOHePkEmaOHux3xxm34u6c137hBWA8YW4WDax3WDlgW:oOaFE3q6hBWiWDaZWDlgW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
114ecb55d6b51e448f40b39196d85130

Files

114ecb55d6b51e448f40b39196d85130
.exe windows:4 windows x86 arch:x86

3c0d767d660dda19bc642f599aa90037

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32Next
GetCurrentProcessId
Process32First
CreateToolhelp32Snapshot
ExitProcess
GetLastError
CreateMutexA
CloseHandle
WriteFile
CreateFileA
GetProcAddress
LoadLibraryA
FreeLibrary
GetTickCount
GetTempPathA
GetSystemDirectoryA
Sleep
GetPrivateProfileStringA
lstrcatA

user32

MessageBeep
GetMessageA
MessageBoxA
wsprintfA
TranslateMessage
DispatchMessageA

msvcrt

_except_handler3
_stricmp
atoi
strrchr
_itoa

netapi32

Netbios

Sections

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ