14adcd7c8aab2ef93b77a5194650c670N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14adcd7c8aab2ef93b77a5194650c670N.exe
Size

63KB
MD5

14adcd7c8aab2ef93b77a5194650c670
SHA1

c32d31e4a4b1ce7ff735b5c44a871f0c949305c4
SHA256

f707b8ec5306b6517b96c91d7320e2185ac3ca480fcaac38677639ea5b0a4122
SHA512

9061c4a2792afa8a5558819a87882d754df5966bf08c327cfa0fa885ac93230bc5ef0ab0c6f61e6b73412c361de66922d7f9078b78aa23bf788d6dd9c8a542f0
SSDEEP

1536:/m7UEiD1J654cqHwTnVAws0uwORBwF1B2U:lDtuVA50BO8BH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14adcd7c8aab2ef93b77a5194650c670N.exe

Files

14adcd7c8aab2ef93b77a5194650c670N.exe
.exe windows:4 windows x86 arch:x86

57a89dbfd42fc716ebb35409d039b48d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CancelDeviceWakeupRequest
GetDiskFreeSpaceA
SetThreadpoolStackInformation
SetConsoleDisplayMode
GetFirmwareEnvironmentVariableW
K32GetModuleFileNameExA
BaseIsDosApplication
SetConsoleScreenBufferInfoEx
ZombifyActCtx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE