41b16001a8621319e214d9614462df6a | Triage

Sharing

General

Target

41b16001a8621319e214d9614462df6a
Size

36KB
MD5

41b16001a8621319e214d9614462df6a
SHA1

7d6900a09f4aee1a6872882519d6f988137a3524
SHA256

e2bd7c1f14bcdc722a80564bedbc8dfabd4dea443b95102e353c840d982f1f22
SHA512

83f703fe2b09c6d4d55ac7718c93941490f1f91a6e8bfb399e9fa983df5c3fe820772b2ae3987b073b8bcc17f057cca7d61d28173cc21b973afbbc00abffdd81
SSDEEP

384:deyHPm/JQ0R5YhdBWcDYZ6IKgABunjjFsxQiikB7gUZrt+kAUb:IKe/W0ReWcDUKgt3FsxQiikB7ZpA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41b16001a8621319e214d9614462df6a

Files

41b16001a8621319e214d9614462df6a
.exe windows:4 windows x86 arch:x86

631225c1aba14bd678e34f7b43424264

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
signal
sin

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 144B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 80B - Virtual size: 80B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 328B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ