14d1310963ea12bb940dfea294ddff43855a0e7f5811896f2ab4e81501f5f691N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14d1310963ea12bb940dfea294ddff43855a0e7f5811896f2ab4e81501f5f691N
Size

120KB
MD5

1bf42c351205177ade5d53e2d8bd7820
SHA1

4cee59bd4142f1a8a79b2433c59632e38bfeff3c
SHA256

14d1310963ea12bb940dfea294ddff43855a0e7f5811896f2ab4e81501f5f691
SHA512

06cfb181ebdb8e299a9d880a59b7adfe7e98b8142c1849756aca032293ab7d7b0519409cbed9dcd6a0b3a5e00390608bcf27df5efa2069d701f73d6ea7478833
SSDEEP

3072:H81P/MgxEtR13mNbi01/Sz6DRJGa7U9B13d:HeXB6t+NbiA2CDSB7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14d1310963ea12bb940dfea294ddff43855a0e7f5811896f2ab4e81501f5f691N

Files

14d1310963ea12bb940dfea294ddff43855a0e7f5811896f2ab4e81501f5f691N
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ