41b61c1a867d2c53d914e5108b1c4886

General

Target
41b61c1a867d2c53d914e5108b1c4886
Size 379KB
Sample240104-x4brjaaba7
SHA256 b56685663e50ed8f10659c996cdc63f1c85cedc65eb210bcf3f34840bd1fe5e4
MD5 41b61c1a867d2c53d914e5108b1c4886
SHA1 5bbddc7ea19155119d17a6b28c105dc9b3b7824e
SHA512 d690498f097c9ebb9a14d9597a83ad2c97d318c13dcba88df3bb9f2ca854fc6d3a108f6d65bb04383ff546a9c2c82341fe90a51f4e6b573e400b7955de03e463
SSDEEP 6144:xY9DABl1Zr2bK7vOs2gYFRartzoj5ZK2i7GH:Ucl1ZrJ7vOs2BRwzoj5Z7
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41b61c1a867d2c53d914e5108b1c4886

File Explorer

41b61c1a867d2c53d914e5108b1c4886

.exe 379KB

41b61c1a867d2c53d914e5108b1c4886

IMPHASH 4de43a5962a4721ead959e24c980016c
SHA256 b56685663e50ed8f10659c996cdc63f1c85cedc65eb210bcf3f34840bd1fe5e4
MD5 41b61c1a867d2c53d914e5108b1c4886
SHA1 5bbddc7ea19155119d17a6b28c105dc9b3b7824e
SHA512 d690498f097c9ebb9a14d9597a83ad2c97d318c13dcba88df3bb9f2ca854fc6d3a108f6d65bb04383ff546a9c2c82341fe90a51f4e6b573e400b7955de03e463
SSDEEP 6144:xY9DABl1Zr2bK7vOs2gYFRartzoj5ZK2i7GH:Ucl1ZrJ7vOs2BRwzoj5Z7
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5776

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNativeSystemInfo WriteConsoleInputW SetFilePointer CopyFileExW SetLocalTime InterlockedIncrement InterlockedDecrement ZombifyActCtx CompareFileTime CreateDirectoryW SetConsoleScreenBufferSize SetComputerNameW GetComputerNameW FreeEnvironmentStringsA CreateNamedPipeW VirtualFree GetConsoleAliasesLengthA GetPrivateProfileStringW GetPriorityClass ActivateActCtx FindResourceExA GlobalAlloc LoadLibraryW GetConsoleAliasExesLengthW InitAtomTable CreateSemaphoreA GetFileAttributesW GetBinaryTypeA GetSystemDirectoryA GetOverlappedResult CompareStringW UnregisterWait GlobalUnlock InterlockedExchange ReleaseActCtx GetFileSizeEx GetStartupInfoA GetCPInfoExW OpenMutexW GetHandleInformation GetCurrentDirectoryW GetProcAddress GetProcessHeaps WriteProfileSectionA ReadFileEx DisableThreadLibraryCalls ResetEvent LoadLibraryA GetConsoleScreenBufferInfo SetCurrentDirectoryW PostQueuedCompletionStatus FindAtomA SetEnvironmentVariableA WriteProfileStringA FatalAppExitA GetCurrentThreadId GetVersionExA TlsAlloc FindAtomW DeleteFileW LCMapStringW AreFileApisANSI lstrlenW EnumResourceNamesW FlushFileBuffers GetLastError MoveFileA GetStartupInfoW HeapValidate IsBadReadPtr RaiseException DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetModuleFileNameW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetACP GetOEMCP GetCPInfo IsValidCodePage TlsGetValue GetModuleHandleW TlsSetValue TlsFree SetLastError QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep ExitProcess FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetStdHandle GetFileType HeapDestroy HeapCreate HeapFree GetModuleFileNameA WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc RtlUnwind InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW MultiByteToWideChar GetStringTypeA GetStringTypeW GetModuleHandleA WideCharToMultiByte LCMapStringA GetLocaleInfoA GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP CreateFileA CloseHandle

gdi32

GetBoundsRect

winhttp

WinHttpOpen

Name

.text

Size

126KB

Virtual Size

126KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

36KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

112KB

Virtual Size

46.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

193B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

22KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

80KB

Virtual Size

80KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

41b61c1a867d2c53d914e5108b1c4886

kernel32

gdi32

winhttp

generic