041ba5118ee9c919ab02a812eb24b59b | Triage

Sharing

General

Target

041ba5118ee9c919ab02a812eb24b59b
Size

7KB
MD5

041ba5118ee9c919ab02a812eb24b59b
SHA1

3cf3fa2d642ee71fa1ca4d4d2f336e50d541397c
SHA256

630c55103136e3b7740e2d5d5392d74d76e9fc8f189ef4510dd7140c6f21b6cc
SHA512

d7df25b5db3dc91b5f75e4bb018b234b56a9ddf656d0822229501088231ca982552275056e6ec33a43f72e9408883703adb3a4a38cd39949b41bd4bf252ab5e5
SSDEEP

96:XfxSbKpS8cHwl44zu/R98PxV7gn6r82Brqvugg33bDrDkFoEuAlkYc5xpFMwBmsy:XgbKpEHwl6RyVsnMqxvixBBW7le

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
041ba5118ee9c919ab02a812eb24b59b

Files

041ba5118ee9c919ab02a812eb24b59b
.exe windows:4 windows x86 arch:x86

b0359257853ecb4c9fbd38a625715066

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDriveTypeA
WinExec
GetCurrentThreadId
GetTickCount
GetTempPathA
CreateThread
lstrcpyA
GetPrivateProfileStringA
CopyFileA
DeleteFileA
lstrcatA
GetSystemDirectoryA
GetModuleFileNameA
CreateProcessA
VirtualProtectEx
GetCurrentProcess
GetLastError
CreateMutexA
GetCommandLineA
LoadLibraryA
GetProcAddress
Sleep
GetVolumeInformationA
CreateDirectoryA
lstrlenA

advapi32

RegDeleteKeyA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA

msvcrt

fopen
sprintf
malloc
strstr
_strlwr
fclose

Sections

.data
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE