14be0dd7f0b2434836fa5610311b8689

Sharing

Copy URL

Twitter E-mail

General

Target

14be0dd7f0b2434836fa5610311b8689
Size

457KB
MD5

14be0dd7f0b2434836fa5610311b8689
SHA1

d37825f7dbc23d531b495acc5c31c35dd5df9118
SHA256

c2574951948105c212c644c5853ff1bfabf2338c98413821baa0add3f3c18d21
SHA512

2c47dca4d303237eda7597fc2d082ed43d0d8d4a3d0292909f4cb84e807f2d9a7d66dbb791556cd4d0c8304b90e32983fa71efe48e584c430a22322f409e5b87
SSDEEP

12288:ZdK0I9dUuFgZiVCcmDoJrojYlkd/HYGHqUxgX7pnG:ZdK0w2iQRDoJrojld/4t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14be0dd7f0b2434836fa5610311b8689

Files

14be0dd7f0b2434836fa5610311b8689
.exe windows:4 windows x86 arch:x86

9dc53bcc6aae62b084394b2014b43ea8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCPInfo
HeapSize
ReadConsoleOutputA
LocalCompact
GetStringTypeW
DeleteCriticalSection
HeapAlloc
LoadLibraryA
WideCharToMultiByte
SetUnhandledExceptionFilter
GetModuleHandleW
InterlockedDecrement
CompareStringW
GetDateFormatA
UnhandledExceptionFilter
VirtualFree
GetCommandLineW
GetUserDefaultLCID
HeapCreate
GetShortPathNameW
TlsGetValue
GetLocaleInfoA
HeapDestroy
GetLocaleInfoW
GetCommandLineA
IsDebuggerPresent
GetStdHandle
GetTimeZoneInformation
GetProcAddress
EnumSystemLocalesA
GetTimeFormatA
HeapFree
GetFullPathNameW
GetLastError
EnumResourceLanguagesW
IsValidCodePage
VirtualQuery
SetLastError
IsValidLocale
TlsAlloc
GetCurrentThread
LCMapStringA
WriteFile
GetStringTypeA
HeapReAlloc
SetHandleCount
ExitProcess
EnterCriticalSection
CompareStringA
VirtualAlloc
TerminateProcess
QueryPerformanceCounter
GetCurrentProcess
MultiByteToWideChar
GetModuleHandleA
GetStartupInfoA
LCMapStringW
LeaveCriticalSection
GetCurrentThreadId
TlsFree
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
GetCurrentProcessId
GetModuleFileNameA
SetConsoleCtrlHandler
GetEnvironmentStringsW
lstrcmpA
GetTickCount
InterlockedIncrement
GetACP
GetOEMCP
TlsSetValue
Sleep
RtlUnwind
GetModuleFileNameW
GetSystemTimeAsFileTime
InterlockedExchange
SetEnvironmentVariableA
FreeLibrary
FreeEnvironmentStringsW

gdi32

GetClipRgn
ModifyWorldTransform
SetBitmapBits
CopyMetaFileA
StartDocW
PolylineTo
CreatePatternBrush
PlayEnhMetaFileRecord
CreateFontW
GetTextMetricsW
StretchBlt
GetDeviceCaps
StartDocA
CreateFontIndirectA

comdlg32

PrintDlgW
PrintDlgA
ChooseFontW

advapi32

CryptAcquireContextW
RegEnumValueA
RegCreateKeyW
CryptHashData
CryptEnumProvidersW
RegCreateKeyA
RegConnectRegistryW
RegDeleteValueW
RegDeleteKeyA
CryptHashSessionKey
InitiateSystemShutdownW
CryptGetDefaultProviderW
RegOpenKeyA
CryptReleaseContext
RegDeleteValueA

Sections

.text
Size: 138KB - Virtual size: 137KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 312KB - Virtual size: 337KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9dc53bcc6aae62b084394b2014b43ea8

Headers

File Characteristics

Imports

kernel32

gdi32

comdlg32

advapi32

Sections

.text Size: 138KB - Virtual size: 137KB

.data Size: 312KB - Virtual size: 337KB

.rsrc Size: 6KB - Virtual size: 5KB

.text
Size: 138KB - Virtual size: 137KB

.data
Size: 312KB - Virtual size: 337KB

.rsrc
Size: 6KB - Virtual size: 5KB