41b4ec6a1b98c1edc46dbdbc602f2ed0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41b4ec6a1b98c1edc46dbdbc602f2ed0
Size

56KB
MD5

41b4ec6a1b98c1edc46dbdbc602f2ed0
SHA1

1b1fa6ddfd7b2595074af0e18f5eabb96e1045eb
SHA256

84223041a95c00a20b5bc23f55f482b233b877c1b11c300628aa235aceadf60c
SHA512

7fd78429809c869fec88976a8fdf692b11c4e6c9d9e0ecd9ec7a1af690fffdf021eb8f037c5a4e8f3f08454da2de449de875d34e92d1e96dd00f69fbb3ccf40d
SSDEEP

1536:g9z9OVDK3VUgXQQT1fnYt2vkN2zx+Ln+cODPS:sB6W3VUgXrJfnYtzNQALn8S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41b4ec6a1b98c1edc46dbdbc602f2ed0

Files

41b4ec6a1b98c1edc46dbdbc602f2ed0
.exe windows:4 windows x86 arch:x86

ec1e08a5089e63bc62f6ea04818bc993

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsValidLocale
EnumSystemLanguageGroupsA
SetComputerNameExA
GetConsoleWindow
VirtualFree
BaseInitAppcompatCacheSupport
GetConsoleProcessList
SwitchToThread
ExitProcess
GetComputerNameA
WriteFileEx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE