141aa860ca480fe0b338c5782e2fc520 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

141aa860ca480fe0b338c5782e2fc520
Size

37KB
MD5

141aa860ca480fe0b338c5782e2fc520
SHA1

d0fceac4199b18156dbf64f920e70f3b69046cd3
SHA256

81512c28da02cbcfcb9fc66431f04f19f718ebd02f6e194720ea623f72b7c9a2
SHA512

8231919b7ebbc2bcbbedda834cc11af6f7106eb7396cf6bad73aba6819bafa8f710c9e8babb269b26eb62e9bf69667c3cd9ec347bf689c5f71de494c855e9fca
SSDEEP

768:LYJPmMEozP+BbNW40FlnJWgvMyx4xLudH4Dw:LYsMWbX2JWgf4luh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
141aa860ca480fe0b338c5782e2fc520

Files

141aa860ca480fe0b338c5782e2fc520
.exe windows:4 windows x86 arch:x86

9184367f8d1f9986888f0eed2e6f8bf4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
GetModuleFileNameA
GetModuleFileNameW
GetProcAddress
LoadLibraryA
GetModuleHandleA
ReadFile
WriteFile
CloseHandle
CreateThread
CreatePipe
ExitProcess
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 257KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE