14b61900603e45577de0509fa06344f9 | Triage

Sharing

General

Target

14b61900603e45577de0509fa06344f9
Size

1.3MB
MD5

14b61900603e45577de0509fa06344f9
SHA1

aaf25a159077456bf5aae61dcd164cb1d00419bf
SHA256

aefaf92e65d551431c91671f8052aeec9c65be0e6f71fc69e6729c50119e87ad
SHA512

730564bdc7cde0de884fae3c22c21747e64b887a52dc39e635f6735c3c731723f073df2bb249329c4666c58901ee85c8ace14227d2b5af5068243334c722c30d
SSDEEP

12288:Ch/pCHxW4pbAOeeeZeeeeEhMEr6CX4zistD:U/eDNAuaE6tim

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14b61900603e45577de0509fa06344f9

Files

14b61900603e45577de0509fa06344f9
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 121KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ