14e4dd88e9985a8c169af81014bc7a6a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14e4dd88e9985a8c169af81014bc7a6a
Size

3.3MB
MD5

14e4dd88e9985a8c169af81014bc7a6a
SHA1

b178a59ecf1b4734fff814f237327cf1483b8333
SHA256

1550490a6dddb4b06236c440303d690aa67e1ba50e13546438c5b2907bd1e705
SHA512

3c67e8796a5f5d2ff43344a3349fbafa6becec99c0cedd109cd08d7452842249f1af6c4cafd8396e47a45cc84e3106a27383b5d2f92e6dce0a0f239ddb24aeee
SSDEEP

98304:rBC8OZXldoxXXpFDB9Zd+sp62NLbgdB2AiQ:rBC8OjdoxX5ZJd+sHyd8NQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14e4dd88e9985a8c169af81014bc7a6a

Files

14e4dd88e9985a8c169af81014bc7a6a
.exe windows:5 windows x86 arch:x86

87703b55d6314f3ada3f79a18cb12385

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
GetVersionExA
GetVersionExW
WideCharToMultiByte
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

SetForegroundWindow

Sections

.text
Size: - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata0
Size: - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata1
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 239KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ