14d83dae9b0cde6afb7c3fcf6efbe24b

General

Target

14d83dae9b0cde6afb7c3fcf6efbe24b
Size

60KB
MD5

14d83dae9b0cde6afb7c3fcf6efbe24b
SHA1

6ad7226ac7c734b5aeef7bd05bc0e963bf5295e3
SHA256

3576739ea3649ac8c88783b7c4f9830138c20cd54e83a3bbab24adb2477699b6
SHA512

586e3a0e6df8a7392bede733dcf118636781580d3c8ac29b12dcace1dffb0ac3b05c004e4d16dad472107e2343cf74ae4a2a20612d19428e49092408c33a5659
SSDEEP

1536:tHi1K1NnUOqJL83t1mIFXkqc/ZSxRYSPs8w:Ik4L+/mTqri4w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14d83dae9b0cde6afb7c3fcf6efbe24b

Files

14d83dae9b0cde6afb7c3fcf6efbe24b
.exe windows:4 windows x86 arch:x86

aebdcf6652d40cdc9ac45dd83fb0a609

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
WaitForMultipleObjects
GetVersion
CloseHandle
LockResource
LoadLibraryW
LoadLibraryA
lstrlenW
GetCurrentProcessId
CreateProcessW
SizeofResource
VirtualAlloc
GetFileSize
WideCharToMultiByte
SetWaitableTimer
InterlockedIncrement
GetLogicalDrives
FindResourceW
GetProcAddress
GetPrivateProfileStringW
FindClose
GetModuleFileNameW
SetEvent
TerminateThread
GlobalUnlock
GetCurrentThreadId
FreeLibrary
WaitForSingleObject

user32

IsWindow
VkKeyScanW
SystemParametersInfoW
TrackPopupMenu
SetDlgItemTextW
LoadIconW
GetParent
SetLayeredWindowAttributes
SetForegroundWindow
PostThreadMessageW
DispatchMessageW
RegisterClassExW
SendDlgItemMessageW
SetCursorPos
GetClassNameW
WindowFromPoint
ReleaseCapture
RedrawWindow
wsprintfW
GetSysColor
DestroyMenu
LoadStringW
GetWindowThreadProcessId
PostQuitMessage
GetWindowDC
InvalidateRect

gdi32

SetMapMode
DeleteObject
GetStockObject
GetObjectW
SetTextColor
CreateCompatibleDC
CreatePen
MoveToEx
CreateRoundRectRgn
BitBlt
CreateICW
SetBkMode
CreateFontIndirectW

advapi32

RegCreateKeyExW
SetSecurityDescriptorDacl
RegCloseKey
StartServiceW
RegDeleteValueW

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

aebdcf6652d40cdc9ac45dd83fb0a609

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 48KB - Virtual size: 47KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 1000B

.text
Size: 48KB - Virtual size: 47KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 1000B