41c04cfadc067680816ae82a87e7a144 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41c04cfadc067680816ae82a87e7a144
Size

102KB
MD5

41c04cfadc067680816ae82a87e7a144
SHA1

eefef211ed64f2f8bc19518d810bbccdc0b54934
SHA256

817421be187f27c642d62340ad72c408a4714c9faad79e5c7bd2c3b52eb74e94
SHA512

1b5e7df90e14f1ed1d28f39d7201e12c70106c6dac06e541ddf4415bc4fb3e7f5ace51e14c104c801f5b3408a17a83f98d351a69f8eed583578e2ba55729900d
SSDEEP

3072:XeqyQhHXXfMGCd3Ihc4O6qzU8QQAXzYLKFQfg49MlsP:uqyQFvMGW4hc4OpTQ9zYLKFy8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41c04cfadc067680816ae82a87e7a144

Files

41c04cfadc067680816ae82a87e7a144
.exe windows:4 windows x86 arch:x86

55a92e43a69a9110d7a879066ef112e4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetLastError
GetVersion

Sections

.text
Size: 99KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ