541b5eadb63e6ab1f72ef9df8f3c80d7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

541b5eadb63e6ab1f72ef9df8f3c80d7
Size

5.0MB
MD5

541b5eadb63e6ab1f72ef9df8f3c80d7
SHA1

0ed3e1e6476d36897502d8c23bb59b261db08bf8
SHA256

045daa08a1fd2ceaa9ef11820959b3dd286d6c8ea1dcc3d11408a1b2915652a6
SHA512

dc0880a60b5ffdaa4d3e7bcc88927e3c6bc6e29ea9578f72f3237133b14e793388e44a77fcb932ab199a88c2136e71260c1f5b924d9b8993e5baad4360990de1
SSDEEP

49152:JnjQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnvxJM0H9:d8qPoBhz1aRxcSUDk36SAEdhvxWa9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
541b5eadb63e6ab1f72ef9df8f3c80d7

Files

541b5eadb63e6ab1f72ef9df8f3c80d7
.dll windows:4 windows x86 arch:x86

2e5708ae5fed0403e8117c645fb23e5b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
CreateProcessA

msvcrt

free
_initterm
malloc
_adjust_fdiv
sprintf

Exports

Exports

PlayGame

Sections

.text
Size: 4KB - Virtual size: 652B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5.0MB - Virtual size: 5.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 684B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ