41069dca1db764f04a7913d4ac59a316 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41069dca1db764f04a7913d4ac59a316
Size

59KB
MD5

41069dca1db764f04a7913d4ac59a316
SHA1

b26fde4da5cf330e67b7fba0d416d2bb6113e699
SHA256

34a86e46582eae928aad6cc143baf960172890f0bb84c140cb4b9685794df759
SHA512

64780fada329a1a9695f1dc3a5a755131098ff2dd21449edd887c595e56f8c2aa38141631dbca0996beea9bddd72ad7bc4aab55ca4635a9373555db9a2578cd9
SSDEEP

1536:QolBUyhYwhNDZ3jpUfiNetMblaNV4JztiYNVL:RLUyhYaDZlUfiY2M4prL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/DSC040.cpl

Files

41069dca1db764f04a7913d4ac59a316
.zip
DSC040.cpl
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

CPlApplet

Sections

CODE
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ