14b23de4277ce6b9a13afccf9b1a578e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14b23de4277ce6b9a13afccf9b1a578e
Size

89KB
MD5

14b23de4277ce6b9a13afccf9b1a578e
SHA1

bf5151e0a1b7d6d4033dca92d43c505161e62154
SHA256

7bee56ae171646b6fdc76f76de3d154a77adc0dc87ee101a4b0adf454dec52ed
SHA512

7124faa1b3fa0329f70e65ddb168932eed47a9d98b0dc652650ad33369352541b954f58cac87bdd1036d394190b87bd87b60e931cf990e0aa634eb29d9d1b1fe
SSDEEP

1536:CpLzyClfXuwbf5Ix7tSn6CRhH1Q6TTtaY0dDoOIIiU2rh0yx8L3DLySM1Kd:gyCB+wRmiRRhH+6adD45hVx8L3DLySMe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14b23de4277ce6b9a13afccf9b1a578e

Files

14b23de4277ce6b9a13afccf9b1a578e
.exe windows:4 windows x86 arch:x86

dc876c6aaf66056559faf2b9d533b8d7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetProcessShutdownParameters
ReadConsoleOutputAttribute
GetExitCodeThread

user32

TranslateMDISysAccel
GetClipboardData

shell32

ExtractIconA
PrintersGetCommand_RunDLL
SHExtractIconsW
SHFileOperation

gdi32

GetSystemPaletteEntries
GetPixelFormat
DrawEscape
AddFontResourceW
SetICMProfileA
CreateMetaFileA
GdiGetDevmodeForPage
EngStretchBltROP
SetRelAbs
PathToRegion
PolyBezier
FONTOBJ_cGetAllGlyphHandles
GdiResetDCEMF

Sections

.text
Size: 9KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 36KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pack32
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ