141dd71b16aa6295be6079adbe26e8c2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

141dd71b16aa6295be6079adbe26e8c2
Size

29KB
MD5

141dd71b16aa6295be6079adbe26e8c2
SHA1

68fafffbef02f791b8d866ffaf5edac815afd916
SHA256

582e1bf64fa8f5d86aec256886de727cb00328b8837dd82214a5363911b8af46
SHA512

4928a523022d3501052f3267af611c54ab8ed6462e50d273d0da22ee55cbb9844e4bc6b35092fd413ca78e5b7810497240e176717016d0d7367359033c85782b
SSDEEP

384:CUXg14XTj9Tvf6TvZF6+E2MfJpimwkOIjf2a:15TJvfevg2MxpDw9IjfR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
141dd71b16aa6295be6079adbe26e8c2

Files

141dd71b16aa6295be6079adbe26e8c2
.exe windows:4 windows x86 arch:x86

e9093de94bb91bd8d61665e6429b741a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentStrings
WideCharToMultiByte
GetCPInfo
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetCurrentDirectoryA
GetEnvironmentStringsW
HeapCreate
VirtualFree
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapFree
RtlUnwind
WriteFile
GetProcAddress
HeapAlloc
VirtualAlloc
LoadLibraryA

user32

MessageBoxA

advapi32

RegCreateKeyA
RegSetValueExA

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 823B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE