41589df38049e371b6ec6a3119bf5784 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41589df38049e371b6ec6a3119bf5784
Size

33KB
MD5

41589df38049e371b6ec6a3119bf5784
SHA1

1723de28e6fc30965ce3e7d13acc88a9949c56d7
SHA256

ce184b29cfffbe6131c32cc9a73d6d06f016ec231ba89d8db3e6466eb36df2ee
SHA512

40e32b077f8e394119d759900d6fe028fb1cbfd5153f3bdbe801c6211aef102bb846deb6b4ce8d4ba8bab854780724ddbbacf44162d1b7536e3f450a63a9d405
SSDEEP

384:0JEQiIpXFukAucxu4SrDdKNz78IztkwowYPzeCC6G60tGMQU1uh:aP0kAucdSr8zQqtkqCC6GSMQUoh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41589df38049e371b6ec6a3119bf5784

Files

41589df38049e371b6ec6a3119bf5784
.exe windows:2 windows x86 arch:x86

02f8a8f4af55f1d685ff5138b3e60baf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
lstrcmpi
GetLongPathNameA
FileTimeToDosDateTime
OpenSemaphoreW
FindAtomA
GetModuleHandleW
VirtualAlloc
GetComputerNameA
LoadLibraryA
SetEvent
GetShortPathNameW

user32

GetScrollPos
EmptyClipboard
SetCapture
ShowWindow
CheckMenuItem
GetSysColor
SetDlgItemInt
ShowCursor
MessageBoxW
MonitorFromPoint
IsWindowEnabled
GetDlgItemTextA
IsDlgButtonChecked
MessageBeep
InsertMenuW

gdi32

CreateFontIndirectA
SetBkMode
CreateEllipticRgn

advapi32

RegReplaceKeyW

comdlg32

ReplaceTextW
PrintDlgA
GetFileTitleA

shell32

StrStrA

ole32

OleCreateEx
CLSIDFromProgID
CreateFileMoniker

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ