41eebe2ae162cdb4f5ba58aa30d26a96009adb38afbaa43671c1675f5a514586 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41eebe2ae162cdb4f5ba58aa30d26a96009adb38afbaa43671c1675f5a514586
Size

1.9MB
MD5

d64933578b07c889fc778d133c4396b0
SHA1

326abe431e2513019c5aa007fc98b29cad1731ea
SHA256

41eebe2ae162cdb4f5ba58aa30d26a96009adb38afbaa43671c1675f5a514586
SHA512

5ec294f0d7db77b616cdf7e20b3f3053aabd823ff249987c685fa84a70f19a6834e24386ef0f2a6a238fd1f73ea5feef2aa8bb2e776e70f94d0ba33daa8577f0
SSDEEP

49152:OHzI4xGIvOuQdtKO2I4J0kNi4y/Nc+p1o7cMMUrGCsuudJL:OTqduQdtGPNi4su+p1o7tMUB3ufL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41eebe2ae162cdb4f5ba58aa30d26a96009adb38afbaa43671c1675f5a514586

Files

41eebe2ae162cdb4f5ba58aa30d26a96009adb38afbaa43671c1675f5a514586
.exe windows:6 windows x86 arch:x86

6d1830ae93d0beedb2b3d5b8c48572ad

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

WriteFile

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

user32

GetWindow

advapi32

RegDeleteKeyA

shell32

SHGetFolderPathW

Sections

.text
Size: 882KB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 796KB - Virtual size: 800KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 282KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ