8e14bddd08d9038de4fd311e7da6accc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e14bddd08d9038de4fd311e7da6accc
Size

184KB
MD5

8e14bddd08d9038de4fd311e7da6accc
SHA1

975cc3dc2e15adfbef13606a67651f340a104ec6
SHA256

8e438b9115b5bb28df25e6590411af3be0fbf3e821df422cd9496a2a47c283e5
SHA512

b7d989678343942c26d28a1a07151e5256c5877fe5306c578f71288348f0aa674a8d724808f586d89938e4fe814400836e5f18808ed7880edb133b57d76bb9ec
SSDEEP

3072:YghSDSG3iIgylUPk83Iu2tbn+REhSNDNx5Xjc2:DhSCfylt8Yu8n+RECDNx5Xjc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e14bddd08d9038de4fd311e7da6accc

Files

8e14bddd08d9038de4fd311e7da6accc
.exe windows:4 windows x86 arch:x86

346d576183d17706dad3074f428e58e0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
SetConsoleHardwareState
LoadLibraryA
IsDBCSLeadByte
FindFirstChangeNotificationA

user32

RedrawWindow
SubtractRect
WINNLSGetIMEHotkey
GetClassInfoExA
GetRawInputDeviceInfoA

Sections

.text
Size: 125KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 410B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 514B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.prdata
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE