41089492b7ed06125b1bb029892ac998 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41089492b7ed06125b1bb029892ac998
Size

2.8MB
MD5

41089492b7ed06125b1bb029892ac998
SHA1

7d2dd2ccc57a247a65872f46ad76e57ce59250f4
SHA256

1b371d2f1e42b5ca41a8e75f3d9902fbe50650583189b3769a00fbb321827f7f
SHA512

f4c1ca462399ca7cf6b95a0f1de1178752c64e4936fd11549bab5a4ee09a1c37fa3e52671ae5049d7b51b06540d2855bbdfccf92a632c08862187ab74d8d65a8
SSDEEP

49152:67Z7hwnNTBi7Z7hwnNTBKoJdXN0BMOwLloBrugQ/lju:67Z7Ss7Z7SHJdXN0B7+siE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41089492b7ed06125b1bb029892ac998

Files

41089492b7ed06125b1bb029892ac998
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ