14fc83ccbfa30662acf97724956047e53b311a9f58bedefaf8e96df88437d50c

General

Target
14fc83ccbfa30662acf97724956047e53b311a9f58bedefaf8e96df88437d50c
Size 96KB
Sample260916-yy4e2adf52
SHA256 14fc83ccbfa30662acf97724956047e53b311a9f58bedefaf8e96df88437d50c
MD5 b7b93df6c3b80102978f70f967fc342b
SHA1 95ce7a92204a95b2a8b5f10facdfe4e4fff3fa28
SHA512 f6fa07da0f640942b23863e582b650d91027c31dc7308b64b446237609ada718a62caa3205f7af70940ca03a883286efcee49fa4b27d77c5c993ad81c1c50f64
SSDEEP 1536:SQjHJWeI/6cofIH3NT73Y7Ih2VQXII7Wso8i:SuHJWeI/mfW9wa6QYIqs
TLSH
T128A31A26B183437BC1027FB54B5449FAB772AC206832C0F773D92B1F897A9967F1851A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14fc83ccbfa30662acf97724956047e53b311a9f58bedefaf8e96df88437d50c

File Explorer

14fc83ccbfa30662acf97724956047e53b311a9f58bedefaf8e96df88437d50c

.exe 96KB

14fc83ccbfa30662acf97724956047e53b311a9f58bedefaf8e96df88437d50c

IMPHASH a12d186f65c99f872323a61923ce70d8
SHA256 14fc83ccbfa30662acf97724956047e53b311a9f58bedefaf8e96df88437d50c
MD5 b7b93df6c3b80102978f70f967fc342b
SHA1 95ce7a92204a95b2a8b5f10facdfe4e4fff3fa28
SHA512 f6fa07da0f640942b23863e582b650d91027c31dc7308b64b446237609ada718a62caa3205f7af70940ca03a883286efcee49fa4b27d77c5c993ad81c1c50f64
SSDEEP 1536:SQjHJWeI/6cofIH3NT73Y7Ih2VQXII7Wso8i:SuHJWeI/mfW9wa6QYIqs
TLSH
T128A31A26B183437BC1027FB54B5449FAB772AC206832C0F773D92B1F897A9967F1851A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

55120

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

GetLastError SetLastError GetTickCount ExitProcess GetStartupInfoA GetStdHandle GetCommandLineA GetCurrentProcessId GetCurrentThreadId GetCurrentProcess ReadProcessMemory GetModuleFileNameA GetModuleHandleA WriteFile ReadFile CloseHandle SetFilePointer CreateFileW GetConsoleMode GetConsoleOutputCP GetOEMCP GetProcessHeap HeapAlloc HeapFree TlsAlloc TlsGetValue TlsSetValue CreateThread ExitThread LocalAlloc LocalFree Sleep SuspendThread ResumeThread TerminateThread WaitForSingleObject SetThreadPriority GetThreadPriority CreateEventA ResetEvent SetEvent InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection MultiByteToWideChar WideCharToMultiByte GetACP GetConsoleCP SetUnhandledExceptionFilter EnumResourceTypesA EnumResourceNamesA EnumResourceLanguagesA FindResourceA FindResourceExA LoadResource SizeofResource LockResource FreeResource DeleteFileA CopyFileA MoveFileA CreateProcessA FindFirstFileA TerminateProcess FindClose

oleaut32

SysAllocStringLen SysFreeString SysReAllocStringLen

user32

MessageBoxA CharUpperBuffW CharLowerBuffW

Name

.text

Size

50KB

Virtual Size

52KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

8KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.code

Size

31KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

14fc83ccbfa30662acf97724956047e53b311a9f58bedefaf8e96df88437d50c

kernel32

oleaut32

user32

generic