14925df739830c6bdb115dce4ed29d70N[.]exe

General

Target

14925df739830c6bdb115dce4ed29d70N.exe
Size

44KB
MD5

14925df739830c6bdb115dce4ed29d70
SHA1

1c8674dda8eda7ab3eb57944837bdce9cd6efa79
SHA256

6152b8392e194317969f175f6de69b60ba762210b4898855ec93934727cb2193
SHA512

ae8b6fe3729228a718ab0e6824781221eabc91a9ca6e4b495f7cd057d85a04eb031eec611f18c7b57e2d015c0f03ac3444d95a131ce8165c12512fed119f2c35
SSDEEP

768:YR2NZfoSP4cNp2Qicm6U2x8DCKxG2KVjV7dKZQTM:YcZD4cNp2QicHjKQ2GZ7dKZQTM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14925df739830c6bdb115dce4ed29d70N.exe

Files

14925df739830c6bdb115dce4ed29d70N.exe
.exe windows:4 windows x86 arch:x86

d7164b5e838359379fca282f215ff67a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupInstallFileA

kernel32

GetCurrentDirectoryW
CreateProcessA
GetTempPathA
WriteFile
GetPrivateProfileStringW
WaitForSingleObject
DeleteFileA
GetCurrentThread
GetCurrentProcess
GetCurrentDirectoryA
GetPrivateProfileStringA
CreateMutexA
GetLastError
CloseHandle
GetSystemDirectoryA
CreateFileA
GetVersion
HeapCreate
VirtualFree
GetStringTypeA
LCMapStringW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
RtlUnwind
ExitProcess
HeapFree
TerminateProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
CreateFileW
GetStringTypeW
GetCPInfo
HeapAlloc
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
MultiByteToWideChar
LoadLibraryA
GetACP
GetOEMCP
GetProcAddress
SetEndOfFile
SetFilePointer
ReadFile
LCMapStringA

user32

MessageBoxA
LoadStringA

advapi32

RegSetValueExW
RegCreateKeyExW
RegCloseKey
OpenThreadToken
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
RegQueryValueExW
RegOpenKeyExW
RegDeleteValueW

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d7164b5e838359379fca282f215ff67a

Headers

File Characteristics

Imports

setupapi

kernel32

user32

advapi32

Sections

.text Size: 24KB - Virtual size: 22KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 8KB

.rsrc Size: 8KB - Virtual size: 4KB

.text
Size: 24KB - Virtual size: 22KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 8KB

.rsrc
Size: 8KB - Virtual size: 4KB