14a53e6ec7f2ca54c7e6c8d22c09384a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14a53e6ec7f2ca54c7e6c8d22c09384a
Size

24KB
MD5

14a53e6ec7f2ca54c7e6c8d22c09384a
SHA1

509409928006242adafd988c483abf1d7f8a84e3
SHA256

311d0a1eaf61a6a02d246123ac3608e669abc712fb10454635300432f0956eba
SHA512

df462f739d5e0ca1f98b6c9b1152f02a6b9f8c9285d3f4ae5d29e72cfa1a1f282e3032bf90270cbe917d5e0c16199500a60d1f69b498c0d450d159adf47a423c
SSDEEP

192:FTEvqFRKVi09w5VT4m2b2Sm+O9ukktP1oy9D5xvyKQ9Z1:9PTKs0920bm+qutZ131xvy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14a53e6ec7f2ca54c7e6c8d22c09384a

Files

14a53e6ec7f2ca54c7e6c8d22c09384a
.exe windows:4 windows x86 arch:x86

2dbb3adaafb8b2b50d05edde9a2ad472

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
GetLongPathNameA
GetTempPathA
Sleep
GetProcAddress
LoadLibraryA
GetModuleFileNameA
CloseHandle
CreateProcessA
MoveFileA
DeleteFileA
WriteFile
CreateFileA
FreeLibrary
GetModuleHandleA
GetStartupInfoA

msvcrt

_except_handler3
sprintf
rand
srand
??2@YAPAXI@Z
__CxxFrameHandler
_access
atol
strstr
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
??3@YAXPAX@Z
time
_itoa

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ