241b07aee977999deb053e385566b0f3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

241b07aee977999deb053e385566b0f3
Size

360KB
MD5

241b07aee977999deb053e385566b0f3
SHA1

3f440ce56828148a543014a491d062e027cd2d97
SHA256

c145fe5b2cd74765ce774f1bc920c23b3073414ea0fa0455591d3fe2f4b8aae7
SHA512

dfcc19425f26f216d9f66c49f6bb5fabfa357fe5cc789db452687abf7335eb3b1b9eb86aeda17822a02679f8bcab015e194d70a9352671ffbe15f3425e655fa4
SSDEEP

6144:vEYb5Q2FQt4dHBkqUVI/i/CHfXlWWQQEqYpnrtTiddkT/BIzF8O4dMKMS:vh5Qo/uf6/1WWAtYddklaiR7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
241b07aee977999deb053e385566b0f3

Files

241b07aee977999deb053e385566b0f3
.exe windows:4 windows x86 arch:x86

c55d58516ab8b94df1945dd02ca3b318

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 327KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE