214f5f1ada192343c192a0d148105fbe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

214f5f1ada192343c192a0d148105fbe
Size

112KB
MD5

214f5f1ada192343c192a0d148105fbe
SHA1

9738c26f5af3d682a2d10eada820e3aa380da56d
SHA256

73ea2bcd7783ed8793ce3c1878a94e96654691d3b23d147d761f76fe589bd872
SHA512

ab4c64654c5149527ad15fab41c5fcb4ddd95d7c3d27812235a60d08ee4c4321d73b29cad1d1429173b5830d77f9467c535805e828b326c0f3d363254029e1d2
SSDEEP

192:JTR8mZy6GVbiDD1HbUvLHP342j4/2LZc10EQpifmlYDCekm4+zqcP:JTR8qyoBUvzPq2WyE8iu6DLd0U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
214f5f1ada192343c192a0d148105fbe

Files

214f5f1ada192343c192a0d148105fbe
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dkndi2sl
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 412KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ca8ffneb
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

14j3qk1g
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

uqp8yd.v
Size: 90KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pdbdsnd1
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ