14190629ea43c2bc9bca8924fb37a7d4

General

Target

14190629ea43c2bc9bca8924fb37a7d4
Size

60KB
MD5

14190629ea43c2bc9bca8924fb37a7d4
SHA1

31c6958d598a13fca704634f1f6e162ef464df29
SHA256

e8ee3b47789a3dac4ebe22369de6c81e1117c8abb5b10a5543e8dbbc465401b6
SHA512

9a1b3db253790f655cc14accee90d177388e779bf536e03fdd9d6ec406ebad8397522274477ceb119174d529356316a15be3ba19c0885a74d13abab219a0265c
SSDEEP

1536:Mg5IvqQMUXqMletaEN2XwBTLBXeZqygYQeW2lcpFS1clZX06:MqIvWCe8o2XcxexglAlcpgclN06

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14190629ea43c2bc9bca8924fb37a7d4

Files

14190629ea43c2bc9bca8924fb37a7d4
.exe windows:4 windows x86 arch:x86

50e6a3b6b0f1917f68080ce3b103c1d9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointer
CreateFileA
GetModuleFileNameA
Sleep
MapViewOfFile
CreateFileMappingA
DeleteFileA
MoveFileExA
WriteFile
CopyFileA
ReadFile
GlobalAlloc
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetTempPathA
GetVersionExA
SetErrorMode
SetLastError
GetFileSize
OpenProcess
TerminateProcess
WinExec
CloseHandle
GetStartupInfoA

user32

LoadIconA
LoadCursorA
SetClipboardData
CreateWindowExA
ShowWindow
UpdateWindow
OpenClipboard
CloseClipboard
FindWindowA
SetForegroundWindow
RegisterClassA
keybd_event
EmptyClipboard

gdi32

GetStockObject

advapi32

RegCloseKey
RegOpenKeyA

msvcrt

exit
_onexit
__dllonexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
memset
free
memcpy
strlen
malloc
??3@YAXPAX@Z
??2@YAPAXI@Z
strcpy
sprintf
strcat
_stricmp
memmove
_exit
_XcptFilter

shell32

ShellExecuteExA
DoEnvironmentSubstA

shlwapi

PathFileExistsA

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

50e6a3b6b0f1917f68080ce3b103c1d9

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

msvcrt

shell32

shlwapi

Sections

.text Size: 12KB - Virtual size: 11KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 40KB - Virtual size: 39KB

.text
Size: 12KB - Virtual size: 11KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 40KB - Virtual size: 39KB