14dd28435a2b75dbbe4cbb7b29a5bd00N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14dd28435a2b75dbbe4cbb7b29a5bd00N
Size

65KB
MD5

14dd28435a2b75dbbe4cbb7b29a5bd00
SHA1

177e0f3f91e523152b398d7856b64180ae812247
SHA256

139d817207159958ae7dd9e46135e61f2fad202d9d87851d07c4949c4ae61873
SHA512

5d2fcd805432320ea55318ad616663921469923f9d39dfa9cf8739b8152c40b0ee7fa329b661ca6f0e7c29c0fd11239b7a7377ded6555684b865ed18414b54ec
SSDEEP

1536:jFlet3P03DcEHu2kf3S12Ndyuki4KShasJcL:xlLHu2sCCDR4KShasK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14dd28435a2b75dbbe4cbb7b29a5bd00N

Files

14dd28435a2b75dbbe4cbb7b29a5bd00N
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 452B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE