14a227956ecf06333699b6702012aa49 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14a227956ecf06333699b6702012aa49
Size

392KB
MD5

14a227956ecf06333699b6702012aa49
SHA1

4dd82dae66aa89202ffe0d9ffe1bc86d4a467ca4
SHA256

6c52a047f0168e2b30ed8aa4d0ddb155baa6faaaba261c4af7c87f8b18b504cd
SHA512

75aab9d547b9bc28ab15240e4cb789927d64df8ee8a426dd92d844371f2b76891eaec0a88f48891b18b7b4f520b3eea2a6287e0aae08934bbe58d2b5985ef471
SSDEEP

6144:J0MvjeIO8byyWeuGtkMvgfwFeuYvxZoJzv2GpKObrVOAESE7QT4He:GMyIayEukOGwQuYQJjLptVOAXE7QT4+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14a227956ecf06333699b6702012aa49

Files

14a227956ecf06333699b6702012aa49
.exe windows:4 windows x86 arch:x86

3763bf2e5bda26b0c533f129aa447fb2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
CloseHandle
CreateThread
SetEvent
SetLastError
lstrlenA
GetSystemTime
GetCurrentDirectoryA
GetComputerNameA
LoadLibraryW
GetTickCount
HeapCreate
GetCommandLineW
UnmapViewOfFile
LocalUnlock
CreateFileA
Sleep
CreateThread
PulseEvent
GetModuleHandleA

user32

CheckRadioButton
GetDC
CallWindowProcA
DispatchMessageA
SetFocus
IsWindow
GetDlgItem
DrawEdge
GetScrollBarInfo
CreateWindowExA
GetKeyState
DrawMenuBar
FillRect

clbcatq

SetSetupSave
DowngradeAPL
UpdateFromAppChange
SetupOpen
CheckMemoryGates

desk.cpl

InstallScreenSaver

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 732KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ