e14dd21df0a0cc501af11ef82af382e2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e14dd21df0a0cc501af11ef82af382e2
Size

80KB
MD5

e14dd21df0a0cc501af11ef82af382e2
SHA1

6e335c548ee8f55b4ee4d691fac1dd80c87fdad9
SHA256

1fef4d313ebad2849fcbb6234ef749ba4acb59abbf19bb70eb148eb34fcaf7d9
SHA512

282ad938c009f8c12bd59a4e24e70cb6f035989a458e43940bc23c3aafa5ea43144485847182f097bacda43614b172fdacc05cf571f69026c93dc205bbb88954
SSDEEP

1536:e9JNmZLCsRnDPNxoaKqXjWSZy3TDpTbHxKCn/8gc82hW8fPL:ZnnVjFM3TDZHx1nw8vYL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e14dd21df0a0cc501af11ef82af382e2

Files

e14dd21df0a0cc501af11ef82af382e2
.exe windows:4 windows x86 arch:x86

7047b04ea7d9eaebfe0d7f88b579ad07

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLocalPrimaryComputerNameA
GetStdHandle
SetFileAttributesW
GlobalFree
Module32FirstW
SetFilePointerEx
LZClose
InitAtomTable
ExpandEnvironmentStringsA
WinExec
LZCopy
RtlCaptureContext

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE