14f79c481be7e6710f3a762edb5c4bd8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14f79c481be7e6710f3a762edb5c4bd8
Size

961KB
MD5

14f79c481be7e6710f3a762edb5c4bd8
SHA1

b5a360e3281fa67f3f97186d50003bd2f5ebf401
SHA256

75cc5fe77dc8f13265a97901d4b516582181fb7e6c34869e5192d2ad7b8ad33a
SHA512

654ddba097997255b8dae69dcb41230f5ac8f91988c09300c25825a30f1cd1040dcc5b105ad1e7f26b7ff72903d245bd54f250ba0552fb08fffa86b5a78dca71
SSDEEP

12288:4gcsGI/cikllUfdOPZg4faNLs20yBupYKetPv9qMmxPTLeZnD9IH6872pObxNN1B:4Uwq0ZMpPPBupQMMmxqnD9g6872pY1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14f79c481be7e6710f3a762edb5c4bd8

Files

14f79c481be7e6710f3a762edb5c4bd8
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 850KB - Virtual size: 850KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ