b41e3ca9b8ff7f2a66333d06ad3ad535 | Triage

Sharing

General

Target

b41e3ca9b8ff7f2a66333d06ad3ad535
Size

47KB
MD5

b41e3ca9b8ff7f2a66333d06ad3ad535
SHA1

7024b13209f696bad39c75971f18bde654065b4d
SHA256

607ff350ae960c0b213e4df37b5a4ad5b236fedf18e2f45ef42382ba63f54bfe
SHA512

1a88ad3753f5c17523f1225ee2821a0f70f08c690845bd51a9366530a0b8328118f069c4a9d140de485566e47be84423fff4e67a39185290fa29c7b3cb31b93f
SSDEEP

768:MByHffoqbZLy0rrJo7MvfoF+e2g8g48w9qUeu/uAENVPOr1NPYcv51X7:MBaffoqbZmSo4le2g8gBUZGAENMLJ5F7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b41e3ca9b8ff7f2a66333d06ad3ad535

Files

b41e3ca9b8ff7f2a66333d06ad3ad535
.exe windows:4 windows x86 arch:x86

1c8b510e4005dfd931483df79ec82b05

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetShortPathNameA
GetDriveTypeA
GetCommandLineA
GetExitCodeThread
GetProcAddress
LoadLibraryA
EnumResourceNamesA
GetProcessHeap
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapAlloc
GetStartupInfoA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
GetStringTypeW

user32

GetSysColor

shlwapi

PathAppendA

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ