41ab5593595d77c23fabbd4469ab2880 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41ab5593595d77c23fabbd4469ab2880
Size

359KB
MD5

41ab5593595d77c23fabbd4469ab2880
SHA1

9ab7b3d73eab2ab9a94a3d72b3c50943cbc74b2e
SHA256

d5ad6702fc80ae9dc77c23c14197577c9728df75c2a7865c67af9fd94e445bbb
SHA512

e4003ddb01a7a281dea76a497087e682ac9733e925d9b11171373edf26593506ce2dff689bcc755fc9a367217450d63a1e427c5437bab4b2a3f127384210dfdd
SSDEEP

6144:5VBXtruW8//rKC/Mz1C3sSTnvziJ+XV9Rgh3rKkg7rULU17:5TXBuVszcbiMXZgh7KxQL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41ab5593595d77c23fabbd4469ab2880

Files

41ab5593595d77c23fabbd4469ab2880
.exe windows:4 windows x86 arch:x86

16bcfc692437b3f8196d1eef0a0b2c70

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SearchPathA
DeleteCriticalSection
TlsGetValue
GetModuleHandleA
ExitProcess
FindAtomA
VirtualProtect
FindVolumeClose
FindResourceExA
GetCalendarInfoA
CreateThread
GetTickCount
CloseHandle
Sleep
SetEvent
lstrlenA
GetDiskFreeSpaceA
ReleaseMutex
GetLastError
FindClose

user32

CreateMenu
EndDialog
IsIconic
EnableWindow
GetKeyState
CloseWindow
GetUpdateRect
GetScrollBarInfo
GetMessageA
DispatchMessageA
CopyImage
DragDetect
DialogBoxParamA
CreateWindowExA

msdmo

DMOGetName
DMOGetTypes
DMOUnregister
DMORegister
DMOEnum

advapi32

RegCloseKey

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ