14340436b5a4d6511fe50a6b3e9f0b8647ac65fe45edf72a1bb667bede71022e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14340436b5a4d6511fe50a6b3e9f0b8647ac65fe45edf72a1bb667bede71022e
Size

486KB
MD5

35676145c3ff8bd44969c18af826b02d
SHA1

0a58be419e682e69bee7cf1ebf580411ab52e3a4
SHA256

14340436b5a4d6511fe50a6b3e9f0b8647ac65fe45edf72a1bb667bede71022e
SHA512

69b19d73aed22ea8f78ef371d6d25ff3cb38c3fd61a022ccde6ead7e6d6c53c27458cf2061c12acb8c808a305b5449a7513c1ecfb5019e8303dcef9c5379ef15
SSDEEP

12288:H5lgu8MLM/78hssWWlhD2rlPpFBBvpeJMN:H5lf88M/wJWWCxeJMN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14340436b5a4d6511fe50a6b3e9f0b8647ac65fe45edf72a1bb667bede71022e

Files

14340436b5a4d6511fe50a6b3e9f0b8647ac65fe45edf72a1bb667bede71022e
.exe windows:5 windows x86 arch:x86

46b9336adb2f672dcc7203d78b439246

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

DestroyMenu

advapi32

RegQueryValueExW

shell32

ShellExecuteW

ws2_32

recv

iphlpapi

GetAdaptersInfo

oleacc

LresultFromObject

gdi32

DeleteDC

winspool.drv

DocumentPropertiesW

oleaut32

VariantClear

Sections

.text
Size: 450KB - Virtual size: 500KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE