a14a69f4ebcb8b04b84b143cba8f6cb3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a14a69f4ebcb8b04b84b143cba8f6cb3
Size

390KB
MD5

a14a69f4ebcb8b04b84b143cba8f6cb3
SHA1

4b13b4ad38fa2fcf19b371814515bbba74ebe342
SHA256

00915b2ed2c0f1bffe7026fb42edde8e90d48da9990990f066919253c4a19e4c
SHA512

57cbf52b4ff23c94f873a1eba35633c9371a1feb68559da6727f996f4e4a25bd940a63302805e37bd5a5b9a9bcb01fa759735c4a75c3b0813f839aea9d01cb7e
SSDEEP

12288:kA7QWJdATr3kKaE2ebiabX3tjBK/7ohtv7MsAjzSuMj9aGQDaTpIC:j7QUdAfkHE2e7XxBKovkbMRapc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a14a69f4ebcb8b04b84b143cba8f6cb3

Files

a14a69f4ebcb8b04b84b143cba8f6cb3
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ExtractResourceToFile1

Sections

CODE
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 898B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 82B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 356KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ