14b63b9baac3282be51dc2ca045ab5a3

General

Target

14b63b9baac3282be51dc2ca045ab5a3
Size

57KB
MD5

14b63b9baac3282be51dc2ca045ab5a3
SHA1

b5780d501af5b2f1a3dcc54f7e1d35e1e01c5165
SHA256

0b4468264f32d357eedc29fc34bd1d0b6bf72aed9761a71dc13e056fd88b720c
SHA512

a1681737d27589c115260c8ef9d418f0e1af49029d70560083e21083ffc330cf32d669dea142f58b22ee376c2b2b072d1d18772d11d31eecd235a26080d3b21a
SSDEEP

768:aCEF7Hb0CDYpKTxCdTaAUMGEeWg5BP0FitA6l4iLf7kl+8sTpdgbZI1DZ0lHU+l:aCioiTxm7ZGE36BP0Fml97kl+8wTtpE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14b63b9baac3282be51dc2ca045ab5a3

Files

14b63b9baac3282be51dc2ca045ab5a3
.exe windows:5 windows x86 arch:x86

9073076472ea17eb186c4608bc54a3e8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

IsValidPtrIn
StgSetTimes
OleCreateMenuDescriptor
CoRegisterMessageFilter
RegisterDragDrop
StgPropertyLengthAsVariant

gdi32

SetBitmapDimensionEx
GdiGradientFill
UnloadNetworkFonts
GdiDeleteLocalDC
GetRelAbs

kernel32

TerminateJobObject
GetCommandLineA
UnmapViewOfFile
GetStartupInfoA
GetSystemDefaultUILanguage
Process32Next
GlobalWire
SetNamedPipeHandleState
GetCPInfoExW
GetModuleHandleA
GetTempPathA
QueueUserWorkItem
GetCurrentThread
FillConsoleOutputCharacterW
SetFilePointerEx

msvcrt

modf
_aexit_rtn
_ctime64
swscanf
_getdcwd
_access
ferror
_ctime64
_execle
_adj_fprem

user32

SystemParametersInfoW
IsClipboardFormatAvailable
GetScrollPos
DdeInitializeA
DdeQueryNextServer
CreateWindowStationW
IsMenu
MessageBoxW

advapi32

RegReplaceKeyW
GetAuditedPermissionsFromAclW
LsaQueryTrustedDomainInfoByName
ConvertStringSidToSidW
BuildExplicitAccessWithNameW
GetCurrentHwProfileW
RegConnectRegistryW
ConvertSecurityDescriptorToAccessNamedW
LsaGetSystemAccessAccount

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9073076472ea17eb186c4608bc54a3e8

Headers

DLL Characteristics

File Characteristics

Imports

ole32

gdi32

kernel32

msvcrt

user32

advapi32

Sections

.text Size: 52KB - Virtual size: 52KB

.data Size: 3KB - Virtual size: 81KB

.rsrc Size: 1024B - Virtual size: 932B

.text
Size: 52KB - Virtual size: 52KB

.data
Size: 3KB - Virtual size: 81KB

.rsrc
Size: 1024B - Virtual size: 932B