214c1d769356af66d9cf079a63fe20e5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

214c1d769356af66d9cf079a63fe20e5
Size

242KB
MD5

214c1d769356af66d9cf079a63fe20e5
SHA1

7435ac2bf4ee7ed626080a2cccfeeb147f63be4c
SHA256

093330d5b940caae03122100eff70a151466bb7845a41f715a0fea0fafc3a9e4
SHA512

1cea4c2cbebca7df19dec7dbce88d6f0e3a2631102bcb8590140ff3426d9328b820f0a6a678604f79fec8a565ebe4febff8afe00e57a192359345e5a309305c7
SSDEEP

6144:diHSod0Pq/KhpipZMnsDJQETetvBYzD6J+PVkqCsA8e:diHtSpipZ1OrBYzDlKqY8e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
214c1d769356af66d9cf079a63fe20e5

Files

214c1d769356af66d9cf079a63fe20e5
.exe windows:4 windows x86 arch:x86

db7d29b96bbb021f77f91ee453b40b30

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
LoadLibraryA
GetProcAddress
VirtualFree
Heap32First
Heap32Next
Sleep
VirtualAlloc
Heap32ListFirst

user32

GetInputState
SendMessageA

wininet

InternetCloseHandle

ole32

CoInitialize
CoInitializeEx

advapi32

RegQueryValueExA
RegQueryValueA

Sections

ncnoEBwd
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PzRcfgae
Size: 1024B - Virtual size: 716B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rCgMUTGU
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

BZzKQSrk
Size: 211KB - Virtual size: 211KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE