641c09b08fd4d778012249953b0b2542 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

641c09b08fd4d778012249953b0b2542
Size

4KB
MD5

641c09b08fd4d778012249953b0b2542
SHA1

c77d8fe934420da3c7e1515215138fbf5de9c844
SHA256

3d80add4666ebe71f493612f5e30ef0503fcdc33a5ad6693b21a9faf09977722
SHA512

16e4e08333efad0e3e042bd6c65eb072a33d314ac52b747dc044d106f8f2e559e4de4baea54198d56e814d5e00155f20b794f1a13299ee0a167af65722066adc
SSDEEP

48:aEZxT0ks8viUWwkJfiTnls85/YUGUwisiBcJzeW:LxT0ks8zzD/YUPwkyJzF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
641c09b08fd4d778012249953b0b2542

Files

641c09b08fd4d778012249953b0b2542
.exe windows:4 windows x86 arch:x86

6af48c7a7d63b2c8c4c1c11edc2ffdfd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrToIntA

kernel32

GetFileSize
lstrcpynA
CloseHandle
CreateFileA
CreateFileMappingA
ExitProcess
FlushViewOfFile
GetCommandLineA
GetProcAddress
GetSystemTime
LoadLibraryA
MapViewOfFile
UnmapViewOfFile

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ