41c301c30aecd1674f5213756489a173 | Triage

Sharing

General

Target

41c301c30aecd1674f5213756489a173
Size

251KB
MD5

41c301c30aecd1674f5213756489a173
SHA1

aa41bf8f6569376e4bf57645958c9cdc7ac6005f
SHA256

3ea8140d34e9160b661e93fb9681f95407864881da9846daf8e175215bdba345
SHA512

ab00087939bf05224074da379d92b1a75b7c003f1821cf234c72e3e4b85ecfa38e091ab34b8a06e337d86d490cd4587985ffcf9448290bf509fdf73341bab773
SSDEEP

6144:4lnIvuujkt0G8w2O7+nxYx8TM7v68H3aLMR26Lcba9LC/Qm1YIxrkozB7pafxHUm:2nIvuujkt0G8w2dnxYx8TM7v68tR26LG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41c301c30aecd1674f5213756489a173

Files

41c301c30aecd1674f5213756489a173
.dll windows:1 windows x86 arch:x86

902c988e5569289dd176f58140b5b6fb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateFileA
CreateFileW
GetFileSize
GetModuleHandleA
GetProcAddress
GetTickCount
GlobalAlloc
GlobalFree
LoadLibraryA
ReadFile
Sleep
WriteFile
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrcpynA
lstrlenA

user32

EnableWindow
FindWindowA
GetWindowLongA
SendMessageA
SendMessageW
wsprintfA

comdlg32

GetOpenFileNameA
GetOpenFileNameW
GetSaveFileNameA

ntdll

memcpy
memset

Sections

.code
Size: 248KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 632B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ