14d6ae7ce06ad918409c28d75221edd9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14d6ae7ce06ad918409c28d75221edd9
Size

132KB
MD5

14d6ae7ce06ad918409c28d75221edd9
SHA1

c1cb8af29bbd5074bf2ff39600d4d50afa5f3b15
SHA256

5ccc04c2a711933c6f709ee5af2a5d4c3582f629261e11aafec32e08b8d2a8cd
SHA512

d42665a68307d220bcfbb6703257163873b8570c7c8fd998e183707f825784e6ee7efbe0343c8139bc2f57284c43a50634fe8938e581873b2ab74a75aaa2d55f
SSDEEP

3072:qxU1qEAh83FYj6caNu3pA3SZjxzCFDWRFuhRG/hsnLhg/h:qPh8zOZhZV7a+Eg5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14d6ae7ce06ad918409c28d75221edd9

Files

14d6ae7ce06ad918409c28d75221edd9
.exe windows:4 windows x86 arch:x86

97650a1530f278ba4beebbecadb2b237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__fmode
__set_app_type
_except_handler3
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_controlfp
_exit

kernel32

GetModuleHandleA
VirtualProtect
BeginUpdateResourceA
GetOverlappedResult
GetWindowsDirectoryA
HeapWalk
lstrcmpA
GetStartupInfoA

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ