41e56ffb9a2675fa77b1bb45d9f69b24 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41e56ffb9a2675fa77b1bb45d9f69b24
Size

171KB
MD5

41e56ffb9a2675fa77b1bb45d9f69b24
SHA1

e4472e3e5ad8497ee569ddcf6493db516a0a9cd1
SHA256

e5ff6c98769875066e3ebcec3fe30abaf49f8b43a99a3d0c1da3017f00fe07c5
SHA512

0f7476de3c992cd032dcf5aa07938467303c4acbdcd92c4ede618fe54047e3c10d6512fee6964d350e75a09f680d2f61489d5e3504ad185ac36cca2e1c76544d
SSDEEP

3072:vzOJkqRVqH1xmon6By+MeqrdN8kZXP92VT4WOemZlZ9ZVyiQ:q6+iSavtrdNVXG0WOhHDQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41e56ffb9a2675fa77b1bb45d9f69b24

Files

41e56ffb9a2675fa77b1bb45d9f69b24
.exe windows:4 windows x86 arch:x86

3291fdcc7276f096f56e526cc3dd9dab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess

winmm

waveOutPrepareHeader

ddraw

DirectDrawCreateEx

user32

GetClientRect

gdi32

StretchDIBits

Sections

pec1
Size: 59KB - Virtual size: 496KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 109KB - Virtual size: 612KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ