41e0d0c55d74baa2de13709ddf83da44 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41e0d0c55d74baa2de13709ddf83da44
Size

16KB
MD5

41e0d0c55d74baa2de13709ddf83da44
SHA1

752f083a305f6f13532fd2023f538f97c237e4cf
SHA256

602097ef151698e2b0f6702c632194d14e8273ce1a5cf57d0075a6463ccafe15
SHA512

c1646a2fc53c038f6fb31fd132189dd451d333fb0a42cc1923b5c81b3ed62e546740c72b0c382dcf80d28d9b21511e6cafa7046b2091f0a8ebdecc7c378da591
SSDEEP

384:I4NYoOA3UlhSstOl2uDNQfWFTCIU+INzNXe1Fb6UZuhbl:I4yoz3U7Tkl2gO0TCL11Q1F+9B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41e0d0c55d74baa2de13709ddf83da44

Files

41e0d0c55d74baa2de13709ddf83da44
.exe windows:5 windows x86 arch:x86

16485e917fe423ace06aa74051f439ec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCPInfoExA
FatalAppExitA
lstrcatA

user32

GetWindowLongA
LoadKeyboardLayoutW

gdi32

CreateFontIndirectExA

Sections

.fasm
Size: - Virtual size: 26KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data?
Size: 11KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.��
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.masm
Size: 1024B - Virtual size: 850B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data?
Size: 512B - Virtual size: 293B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ