0941a77ab10f26de32f8fbb171d840d7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0941a77ab10f26de32f8fbb171d840d7
Size

149KB
MD5

0941a77ab10f26de32f8fbb171d840d7
SHA1

0ada7f5c9b6b03acb7bff7ba0002b8539d704831
SHA256

b833644d036f8cb4a753bb848da10b10ddd1e6ea2377a2a1956a38ad94524f82
SHA512

0abbfea3409756f6562d8782540c17fe556b9faa6278074c3a85a744071e9c013be9f911adf521a075eef4bb8d8e930a05da53057e226c971a65dac29f2add28
SSDEEP

3072:S3MZN5EoZ198NUFpjSpQd3rOTFHQYTu4Ujg0D/uszk8wreDd35:S3qWRwmHQY1QceDL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0941a77ab10f26de32f8fbb171d840d7

Files

0941a77ab10f26de32f8fbb171d840d7
.exe windows:4 windows x86 arch:x86

67f710947b0e08c207fdf4da1e8ac00b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
WriteFileEx
LockFile
GetStartupInfoA
HeapDestroy
SetEndOfFile
GetModuleHandleA
DeleteAtom
SetThreadLocale
GetWriteWatch
GetSystemDefaultUILanguage
CallNamedPipeA
GetSystemPowerStatus
SetEnvironmentVariableA
GetComputerNameExW
GetVolumePathNameW
TryEnterCriticalSection
TlsFree
OpenMutexW
_llseek
EnumSystemCodePagesW
AddAtomA
GetThreadTimes
WriteFile

msvcrt

_acmdln
wprintf
__set_app_type
_spawnvpe
_ecvt
memcpy
_ungetch
__p__commode
_snprintf
_exit
fgetws
__setusermatherr
_dup
_initterm
_XcptFilter
wcslen
__p__fmode
_adjust_fdiv
exit
_inpw
_controlfp
__getmainargs
_except_handler3

Sections

.text
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ