41c532f60be5f9091588fe33c9e42fca | Triage

Sharing

General

Target

41c532f60be5f9091588fe33c9e42fca
Size

70KB
MD5

41c532f60be5f9091588fe33c9e42fca
SHA1

66409a4416c28af83fb2e4e1a84a6e7e82decdc0
SHA256

dd5fca4816d8cb6c449dba92f53b9949d1d3f49976e0b23cc9bebc1c1ce5f266
SHA512

bb23832a9e7e6b7b9755771663a404ae7e99799a44e75b5a4a331450c6b2c6ea82ab22e36e7e38afc5f00ffec1ae2efe38e9b26fe4929e4c471d5d760e200778
SSDEEP

1536:FS8H/Io1a4ID8sAgciC4ebDWTpTTZz/w:FS8Hgo4TD8sA36pTTZz/w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41c532f60be5f9091588fe33c9e42fca

Files

41c532f60be5f9091588fe33c9e42fca
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

Install
ServiceMain
Unstallx

Sections

CODE
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 11KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 110B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ