14413ce82c3f95d4cadd51aaee96a80d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14413ce82c3f95d4cadd51aaee96a80d
Size

223KB
MD5

14413ce82c3f95d4cadd51aaee96a80d
SHA1

21ee78e7e9a56a4c4dd9e5743687b95ccee73d05
SHA256

78d9b0ad6eb3e46c2b9c90ebbe96aee016060ad594f88cb6155d9309fd34d888
SHA512

a8790cf4bcc0132f09bddd6ee9ce3fa7d63ed1c83f0114dae5c17c7d983a63c408fad9f44d425d7a3c03ad1dd029ccd7e855e99a76e5b3f3f4fe58d5bd17d5e1
SSDEEP

6144:pVeve/3xToL3zDKJK+AwbCKJT7YpsrJ/l6puJDTC:b+QUzKJK+AweKapu6cJH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14413ce82c3f95d4cadd51aaee96a80d

Files

14413ce82c3f95d4cadd51aaee96a80d
.exe windows:4 windows x86 arch:x86

aead3bfad5ee1d2681ec0f9c180d7c72

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

ExitProcess
FindFirstFileExW
InterlockedPopEntrySList
SetConsoleScreenBufferSize
GetCommTimeouts
SetCalendarInfoW
LocalSize

user32

ScrollWindowEx
InternalGetWindowText
PeekMessageA
CreateAcceleratorTableA
WaitMessage
GetMenuContextHelpId
PostQuitMessage
AlignRects
ScrollWindow
SetMessageExtraInfo

ws2_32

WSAAddressToStringA
WSCInstallProvider
WSCUpdateProvider
WEP
bind

Sections

.text
Size: 221KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ