74c14b5d98d55fd3347436ad07fa7152 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

74c14b5d98d55fd3347436ad07fa7152
Size

72KB
MD5

74c14b5d98d55fd3347436ad07fa7152
SHA1

f066aa5b24d4f5c15fe496c49274f54b2be4f739
SHA256

79f8c357022a17dbb7cc15784f56174457680b3413321fd70ba1b5db31acff8d
SHA512

a7b68ce25cab980af67487ecc1bd299e051e14ccdf9330fb75d7de764ce18f486d35ea6ea72db8a743b717bc36b4a48378f2ed74731c3819fedbf4c34d0e57ee
SSDEEP

768:/Rbfa9jsXEMvZgUT2Fhm2oLjX4FFhNUzHGar/CxeureunneuIytcStnb6Xn9Ugu8:ws0MBgG22r4IwcSZbta

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74c14b5d98d55fd3347436ad07fa7152

Files

74c14b5d98d55fd3347436ad07fa7152
.exe windows:4 windows x86 arch:x86

1900879c98b4a96d399d6ce626330c68

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

urlmon

URLDownloadToFileA

shell32

ShellExecuteA

Sections

CODE
Size: 41KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE