14a2fdf252d03ee9be2c9e4f8167c063 | Triage

Sharing

General

Target

14a2fdf252d03ee9be2c9e4f8167c063
Size

46KB
MD5

14a2fdf252d03ee9be2c9e4f8167c063
SHA1

c4feaec5f7945ca8c768aa437711c6c8e1a3b570
SHA256

5c55a58cc7af3b8ade48fef790c71131a0ecf93cfd2e8dbe3e87697953f1b99a
SHA512

2122f1b564a5c28ae7a3a409f915e4f997b3c9aad161e539551f8b5939cdd5d0a5cb8d232a33a3b441ce9055ff37cfbb9b03151affe7a057aa4f3a568fcba3ed
SSDEEP

768:LcbqZnqb13kEXfMBaQ33ky3/DEEhDKB39u4goV44qC/1eJguJJVZXuYQbvzB7nl/:LXZInE3L/DfRvJLZUvzBnqNSFEkDx7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14a2fdf252d03ee9be2c9e4f8167c063

Files

14a2fdf252d03ee9be2c9e4f8167c063
.exe windows:1 windows x86 arch:x86

0bb9bfeb0311b52774cd9b0abbaa335e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
VirtualProtect
GetProcAddress
EnumSystemCodePagesA
GetModuleHandleA
ExitProcess

user32

DialogBoxParamA
GetDlgItemTextA
EndDialog

gdi32

BitBlt

Sections

.code
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 43KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 410B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE