41bb27a0f9637e8ccac0cbebba15b09f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41bb27a0f9637e8ccac0cbebba15b09f
Size

390KB
MD5

41bb27a0f9637e8ccac0cbebba15b09f
SHA1

40b6fe8376dd8a1b8d3a062b9f86b3b241bc4596
SHA256

4c7f8245b41c181126df5b0e4d2ede1164a2320660c651cc7dc2f84dc9fd2cfb
SHA512

fe0039670c394a327a719c1ae631cb7ca85bdf099ec58a13ec96955f98e6907f4cff5659ffd654fa518bfe965e3cc82c958c6d6ae4fb50a1532e8478b45030cf
SSDEEP

6144:OSy6YHwykOV4v2VxSMBiNGFfsKUxI+PbfICMfue1CULgsrqskJ+UYdpEP/:DYHwHbc20FP+c9xq6XEP/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41bb27a0f9637e8ccac0cbebba15b09f

Files

41bb27a0f9637e8ccac0cbebba15b09f
.exe windows:4 windows x86 arch:x86

8814fca28f1a0fe8376675dbba9c2333

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

RegisterClipboardFormatA

gdi32

PtVisible

msimg32

AlphaBlend

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA

advapi32

RegEnumKeyA

shell32

ShellExecuteA

comctl32

ImageList_GetIconSize

shlwapi

PathIsDirectoryA

oledlg

ord8

ole32

CoInitialize

oleaut32

OleCreateFontIndirect

dbghelp

ImageDirectoryEntryToData

wininet

HttpOpenRequestA

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 360KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE