41aa2979669cf968802bfcffb5ea9fc0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41aa2979669cf968802bfcffb5ea9fc0
Size

33KB
MD5

41aa2979669cf968802bfcffb5ea9fc0
SHA1

f84fbc23101c13784b2aea52bf7490858ee07135
SHA256

d36b5d3499f0300f67dc5547f153222eae87c635632e68927312138ec31f0242
SHA512

3c48c9b129f664060437af9b4ff2ac6ec24bad150c64b695ac9865ccebb4d518e61fb13f0a7746450e01ce85b452de0f31a974aee33572b0fd950ad807be3bca
SSDEEP

768:sPWGk09Be7dTCzJA9WTvQgmuNpzGPLKt97VujyTSlA+wYXa:Sd9c7dO1vvzrzALuxujyTSlA+wYXa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41aa2979669cf968802bfcffb5ea9fc0

Files

41aa2979669cf968802bfcffb5ea9fc0
.exe windows:4 windows x86 arch:x86

8fd132dda85977a112d2f82151706f5e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDateFormatA
GetStartupInfoA
LeaveCriticalSection
MapViewOfFile
ReadFile
SetEndOfFile
SetLastError
TlsAlloc
VirtualAlloc
lstrcmpA

msvcrt

_wcsicmp
fprintf
swscanf
time
wcscat
_cexit

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 891B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ