14d47d786772560e8c9ff6fa151c3f740caa527bd18fb230b6c035e571e8c314

General

Target
14d47d786772560e8c9ff6fa151c3f740caa527bd18fb230b6c035e571e8c314
Size 1.4MB
Sample260916-yyfc7sdf28
SHA256 14d47d786772560e8c9ff6fa151c3f740caa527bd18fb230b6c035e571e8c314
MD5 d4de48befeb5f8052fa96251a4b4f434
SHA1 86000bc4003962f65becfb9a3b65de040a3cc7a1
SHA512 e82c194b302bcc64e3f64af4b3be88588ac6e8eead3268dcfcbde51099d99afcbdaa64b8a6eb8e8a3d967886b2ee5bd3e64a03482070306213261f98953d0223
SSDEEP 24576:aaQE89qa2mZqAtfY/KK8eOsrIF+DKC2yHz2YIUehgKIGJBP8XxMJ:aa9MZbfDKpOsrIIDKuzTIUNPGJB4MJ
TLSH
T1B76523127781C1FBCA9602721CF4FBAE566EB9624B704AC773D8170E4EA06D15A33793
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
14d47d786772560e8c9ff6fa151c3f740caa527bd18fb230b6c035e571e8c314

File Explorer

14d47d786772560e8c9ff6fa151c3f740caa527bd18fb230b6c035e571e8c314

.exe 1.4MB

14d47d786772560e8c9ff6fa151c3f740caa527bd18fb230b6c035e571e8c314

IMPHASH 1848ca61a160f5aad02d3f796d279aa6
SHA256 14d47d786772560e8c9ff6fa151c3f740caa527bd18fb230b6c035e571e8c314
MD5 d4de48befeb5f8052fa96251a4b4f434
SHA1 86000bc4003962f65becfb9a3b65de040a3cc7a1
SHA512 e82c194b302bcc64e3f64af4b3be88588ac6e8eead3268dcfcbde51099d99afcbdaa64b8a6eb8e8a3d967886b2ee5bd3e64a03482070306213261f98953d0223
SSDEEP 24576:aaQE89qa2mZqAtfY/KK8eOsrIF+DKC2yHz2YIUehgKIGJBP8XxMJ:aa9MZbfDKpOsrIIDKuzTIUNPGJB4MJ
TLSH
T1B76523127781C1FBCA9602721CF4FBAE566EB9624B704AC773D8170E4EA06D15A33793
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

d4:46:31:4b:fa:99:70:79:73:5a:99:25:f6:61:3e:16:91:22:f1:72

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=HASTINGS INTERNATIONAL B.V.,O=HASTINGS INTERNATIONAL B.V.,L=Willemstad,ST=Curacao,C=AN

Chains

Sep 15, 2026

CN=HASTINGS INTERNATIONAL B.V.,O=HASTINGS INTERNATIONAL B.V.,L=Willemstad,ST=Curacao,C=AN

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Minor OS version

1

Major OS version

5

Entry point

63463

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\BugSec\BugSec Packer\Release\Template.pdb

kernel32

FreeResource FindResourceW LoadResource CreateProcessW WaitForSingleObject SizeofResource GetTempPathW LockResource DeleteFileW ReadConsoleW ReadFile EncodePointer DecodePointer GetSystemTimeAsFileTime GetCommandLineA RaiseException RtlUnwind HeapAlloc GetLastError HeapFree IsDebuggerPresent IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection ExitProcess GetModuleHandleExW GetProcAddress MultiByteToWideChar WideCharToMultiByte HeapSize SetLastError GetCurrentThreadId WriteFile GetConsoleCP GetConsoleMode CloseHandle GetProcessHeap GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW GetModuleFileNameA GetModuleFileNameW QueryPerformanceCounter GetCurrentProcessId GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW HeapReAlloc CreateFileW LoadLibraryExW IsValidCodePage GetACP GetOEMCP GetCPInfo LCMapStringW SetFilePointerEx SetStdHandle WriteConsoleW FlushFileBuffers OutputDebugStringW SetEndOfFile GetStringTypeW

user32

MessageBoxW

Sharing

General

Malware Config

Signatures

File Explorer

14d47d786772560e8c9ff6fa151c3f740caa527bd18fb230b6c035e571e8c314

PE Signature issue

kernel32

user32

generic