41066082b5ab9f77145415dbe682cc64 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41066082b5ab9f77145415dbe682cc64
Size

774KB
MD5

41066082b5ab9f77145415dbe682cc64
SHA1

e3865fd574723f5b973b20467d77c3503183906b
SHA256

57170804d2a6ca8d8467d0d3698293510a2e4657776e2365ea8f9b920743dbc5
SHA512

487dcac77cb0c34673ac08c25ad084c93d0051f0305d78d1e1b04e2d5ed1df7cfc4129de5bb1aa6f38cd49fd69a9a75ff19e7a4820e508b2da49666dd9e11c4b
SSDEEP

24576:uoSDENbv1ZAaJ34nMuzLcddvzcV3jJAiQwI:ujSbv1ZAaEZgzcAiQv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41066082b5ab9f77145415dbe682cc64

Files

41066082b5ab9f77145415dbe682cc64
.exe windows:4 windows x86 arch:x86

f0de6979b347d6c97097a1ff2f3d8737

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentVariableA
CreateFileA
ReleaseMutex
FindResourceA
lstrlenW
GetExitCodeProcess
HeapCreate
VirtualQuery
GetProcessHeap
CloseHandle
CreateMutexA
GetModuleHandleA
DeleteAtom
GlobalFree
GetCurrentThreadId
SetLastError
TlsGetValue
LoadLibraryExW
GetStdHandle
GlobalUnlock

user32

DrawMenuBar
DispatchMessageA
GetIconInfo
CallWindowProcA
FillRect
IsWindow
CreateMenu
CheckRadioButton
SetFocus
DrawEdge
CreateWindowExA
GetDC
GetDlgItem

ntshrui

GetLocalPathFromNetResourceA
GetNetResourceFromLocalPathA
IsPathSharedW
IsPathSharedA
SetFolderPermissionsForSharing

msasn1

ASN1BERDecEoid

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 765KB - Virtual size: 768KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE