41ac40b2bfefb99f005d2cda19ce5dceeec9fcf4766bf3e4b31d36f18204f620 | Triage

Sharing

General

Target

41ac40b2bfefb99f005d2cda19ce5dceeec9fcf4766bf3e4b31d36f18204f620
Size

5.2MB
MD5

36399fe72e5a8a29a42defe1700126e2
SHA1

bff21a2c1a8203aee5a2c2a5aa3259e73206ca95
SHA256

41ac40b2bfefb99f005d2cda19ce5dceeec9fcf4766bf3e4b31d36f18204f620
SHA512

b4461aed93798bb2a10495441e19a0f04f0ec8aff71b16e6ac2f219218a23e988381f4a72c38fc3977e06cfedbaa847ba236a4e96633d966a7b16045a2d2c899
SSDEEP

98304:mtX/40VylSlgJ68ZHIoLzBET1O2S9byQBxfke2tCFq/kABxtjknL5XHBUn:ojP8NzmT1A9fBV/RBynoL5XBA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41ac40b2bfefb99f005d2cda19ce5dceeec9fcf4766bf3e4b31d36f18204f620

Files

41ac40b2bfefb99f005d2cda19ce5dceeec9fcf4766bf3e4b31d36f18204f620
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ