2b14fc89104aa9fd9c0cd783f892b038 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b14fc89104aa9fd9c0cd783f892b038
Size

174KB
MD5

2b14fc89104aa9fd9c0cd783f892b038
SHA1

b9bb5c1593118624fa83b3c2d0343cd08399f88e
SHA256

f9595c32b7360982e23e2c827ff891146c816bd4be6cb8cad72f17350c8bbbce
SHA512

ef8badf0f0d8ee24f4f642e19ddad4b0c8c28a2e594751e3d97e11b4cfc5d2b1d857639b23c3154872419b6258e7693cd521ce2e1e8be3eb892de8ca20382e14
SSDEEP

3072:RoNC64SzGa4NpZdR9Ycr3hoLo+t4cGkC9hNGnszASgdKFAte3:+NCXSCaiFR9Y23Gh4cGDhwszyKFA2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b14fc89104aa9fd9c0cd783f892b038

Files

2b14fc89104aa9fd9c0cd783f892b038
.exe windows:4 windows x86 arch:x86

4ddc9f4612edd05cda035f5d3475c790

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

wininet

FindNextUrlCacheEntryA

shell32

SHGetSpecialFolderPathA

Sections

CODE
Size: 166KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE