2041098872ff83e3bb0b2dcbde5da846 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2041098872ff83e3bb0b2dcbde5da846
Size

158KB
MD5

2041098872ff83e3bb0b2dcbde5da846
SHA1

952e9fdac50fbeae8996576cea7c8f97170c9561
SHA256

ea5f9f9f3a9d0bc64a57c6e317fe9e44281594dbd3a33ed5ecd3589f509621b8
SHA512

8bd4234df0db1aa75060e81e3cc20b30a1dcad72450f7a6926eea4361dac8fae60994fe10e5ea2d0230b0bab05adc033f52e19b27fa22e0032e6e267c74458c7
SSDEEP

3072:KtcdLqiGRSfT4LRSeAptEj9/69GvWFbxlvSYZTFTWEojO27ohuXbXljNA0:0cdLeSfT4GbEjRAGvUvSYjTeFV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2041098872ff83e3bb0b2dcbde5da846

Files

2041098872ff83e3bb0b2dcbde5da846
.exe windows:4 windows x86 arch:x86

dcbe64c2205f3ac23685dd118f8ab6ed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetStartupInfoA

user32

GetWindowRect
EnableWindow
FillRect
BeginPaint

gdi32

CreateFontIndirectA

oleaut32

GetErrorInfo
SysAllocStringLen

msvcrt

_controlfp
_except_handler3
__set_app_type
strcmp
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_strrev

Sections

.text
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 774B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ