14a69ccad8c953287007bb84d7d8b2f9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14a69ccad8c953287007bb84d7d8b2f9
Size

9KB
MD5

14a69ccad8c953287007bb84d7d8b2f9
SHA1

d68205b06d29b752c0489d7c4f735e9f3b172bb4
SHA256

70cb7848de833db93335898ba4ce5c09c6260f7891421c03cc40122488134559
SHA512

979c0b80528596a1b7b8c640eca7dcc591e5f3b20cb43598af06e8c183036e831522cb4ca0280e4aa5501c43c62adcaa31482b57df122b9052b24b0bae8c70e9
SSDEEP

192:uhn1CbkK4tNuluNtnG+XWll3g6dy00uLTL:jYrtNuluNtnDmPy00MTL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14a69ccad8c953287007bb84d7d8b2f9

Files

14a69ccad8c953287007bb84d7d8b2f9
.exe windows:4 windows x86 arch:x86

93fb31442769660c59e42c3f6260744d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetLastError
CloseHandle
WriteFile
CreateFileA
GetTempPathA
GetTickCount
HeapFree
GetProcAddress
HeapAlloc
GetProcessHeap

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 452B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ