41641f4bb96a9497adf5d09716f77b49 | Triage

Sharing

General

Target

41641f4bb96a9497adf5d09716f77b49
Size

385KB
MD5

41641f4bb96a9497adf5d09716f77b49
SHA1

1e5613d2657991e6821939d68e65bbea16e0dfa5
SHA256

3e0565304c1d7e1c8600717fd11c1163b4ab7d301ec049d8d229c087ab5d093f
SHA512

e9abb8b52f42d3e3d778a5cc45adc205187717051ac8d3a98a499e13a6ddbcff4942eefdb07dd2dbd9b3c5d2980a1f5a9a0c2dad3373a9cf46f5b1aae30cb998
SSDEEP

6144:8M+tr5yvCR+gIyhFsstw1okjvd0Bp/hXuoLuakhN5FdDuDB:wr8vo+gFF+5vd0XVTLuasNpDuDB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41641f4bb96a9497adf5d09716f77b49

Files

41641f4bb96a9497adf5d09716f77b49
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ