14409ac147df76ecbf7c1a48777bab81 | Triage

Sharing

General

Target

14409ac147df76ecbf7c1a48777bab81
Size

130KB
MD5

14409ac147df76ecbf7c1a48777bab81
SHA1

db8cf41bf8d0bff727e4e32a4f68730aa9e4a05a
SHA256

8ceff0aac139c6334b06db771eb6d7d368e9a9de8f743c808abd5e42b59c662b
SHA512

6ddb7595a6bea83049ed2970eb5420492d3cc517246b6679d9d8163809e8f12a42e6266d5ca3d5f9ed7c0c96c284eb740dbed6f65133392991dea78124c7a924
SSDEEP

3072:ZKrbGe5bfS3yccbdA/BdgoHp+QFq2jqasC/I6hi0T:ZcbGe5bOcIVJ/jqK/I6hHT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14409ac147df76ecbf7c1a48777bab81

Files

14409ac147df76ecbf7c1a48777bab81
.exe windows:4 windows x86 arch:x86

ca0c6694a07b18ba150dd47aa7558c17

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumResourceNamesA
FindAtomA
FindClose
FlushFileBuffers
FreeEnvironmentStringsA
FreeLibrary

user32

DrawStateA
EndMenu
EndPaint
EnumDesktopsA
FillRect
GetCaretPos

msvcrt

tan
_strrev
_strset
_tolower
_utime
_wcsicmp
_wctime

urlmon

CoInternetParseUrl
DllUnregisterServer
FindMediaType
FindMimeFromData
GetClassURL

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 125KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE