41af13cf5c268dbc8ea38e5d4f467866 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41af13cf5c268dbc8ea38e5d4f467866
Size

172KB
MD5

41af13cf5c268dbc8ea38e5d4f467866
SHA1

4518be9fcb8d738dfa99109ccd281ea384514f87
SHA256

43af08771729fd873dc13c8adcd7f4f7202178615cc73188caf000b6ed0df0c9
SHA512

2faca3a9d25d90525b4f93f60be0b3d23f8dab18d65108fe30f60e21906652112457e4b74938bdc1697a324c3b5945867115cfe8a3314223fe209536c3e2bc09
SSDEEP

3072:m2OmA/bBpa47Fd9b/B/VB6fIURrKZTCU0BTi5A7zzPLd+shw+Bzmm8ZHG3F:5DULvGyPVk+shbzmm8ZK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41af13cf5c268dbc8ea38e5d4f467866

Files

41af13cf5c268dbc8ea38e5d4f467866
.exe windows:5 windows x86 arch:x86

b244c8e021bdac53ab7961d8ef7cea0e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsCharAlphaA
IsCharLowerA

kernel32

GetTickCount

Exports

Exports

?ImageInformationLongEsn@@YG_KPAUHBITMAP__@@PAU_PSP@@@Z

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.timer
Size: 512B - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ