00441bc2413fb6b0ff5e173a7380170c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00441bc2413fb6b0ff5e173a7380170c
Size

229KB
MD5

00441bc2413fb6b0ff5e173a7380170c
SHA1

ce07fd38a21e4a9669d6f9fff7446b60f1c1170b
SHA256

49ae3d49dd58aa2baa0d60b9f156e1620465d6cb07b0de8220ac8010910fbe26
SHA512

dcb1f08e3b046392d8758de0c6720bb0da8f36d306ab7d055f975ebe478cafbb2b9d77f153672d4240ed7a80343184033c4c19f5123c82ec1ddd73dae5ca65ca
SSDEEP

6144:UqEaEMsgdeNFfx1pz9I8mksM7Tn8CS5UDBrAU:U9nGqpHpZI8F7seD1AU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00441bc2413fb6b0ff5e173a7380170c

Files

00441bc2413fb6b0ff5e173a7380170c
.exe windows:4 windows x86 arch:x86

5a4c3ed95a1bb8b5028f3c0b77572f36

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadResource
FindResourceA
GetModuleHandleA
FindClose
lstrlenA
FindNextFileA
FindFirstFileA
GlobalFree
CreateProcessA
GlobalAlloc
ExitProcess
LockResource
GetWindowsDirectoryA
GetSystemDirectoryA
GetCommandLineA
GetVersionExA
ReadFile
SetFilePointer
GetFileSize
WideCharToMultiByte
MultiByteToWideChar
GetTickCount
SizeofResource
CreateFileA
WriteFile
CloseHandle
GetLocalTime
SetFileTime

user32

wsprintfA

advapi32

RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 217KB - Virtual size: 217KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ