41557f9ebd51a52070ae3a9f88cecac6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41557f9ebd51a52070ae3a9f88cecac6
Size

44KB
MD5

41557f9ebd51a52070ae3a9f88cecac6
SHA1

5b381ea750aebbda5972e61921c02c0b671e2169
SHA256

ca066d189f913620527f610320222f898898840ec294e2af1895294e96dad117
SHA512

83ec3874b919e316f64a27834e73c4a92d41ab33a839aa922938db8fa4ae2d1b3930379a0cec6d4ec1830fc3e7fa964aa1f6c0ab7ddc0f75ceb85b787a489104
SSDEEP

768:ZqG4v+rUVBlj2SQu1S+1B/1eQtNpftTE0fe+qSwmgO9Kbi/2Jb7d73e2ojOpnSQ:ZqG4v+e2ASMhzftTPecMb2MlS2oKpn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41557f9ebd51a52070ae3a9f88cecac6

Files

41557f9ebd51a52070ae3a9f88cecac6
.exe windows:4 windows x86 arch:x86

5a9460aaf05c1c5daafc9ea4681306e4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
lstrcmpA
lstrlenA
FindAtomA
lstrcpynA
GetModuleFileNameA
CreateMutexA
CloseHandle
GetTickCount
GetVersion
GetTempPathA
GetSystemTime
WriteFile
lstrcpyA
GetCommandLineA
CreateProcessA
lstrcatA
GetLastError
GetProcAddress
GetTempFileNameA
GetLocalTime
LoadLibraryA
ExitProcess
OpenMutexA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
VirtualQuery
GetVersionExA
RtlUnwind
IsDebuggerPresent

user32

wsprintfA
ClientToScreen
GetCursorPos
GetCaretPos
GetWindowRect
EqualRect
IsWindowVisible
GetFocus
InflateRect

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE