241f961b006fa3a62d52f871a845ba4380986ffcf930d1cd68889a5295462543N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

241f961b006fa3a62d52f871a845ba4380986ffcf930d1cd68889a5295462543N
Size

2.1MB
MD5

96fe027754e6fdf3251bca1708eafbe0
SHA1

5bb887b04091378bc3e7ad9ac863465d60c42ad0
SHA256

241f961b006fa3a62d52f871a845ba4380986ffcf930d1cd68889a5295462543
SHA512

a0bd90bf6800cae323538ab709f3e3b79b9bad1e50396d0a2828316bc7a1363e78678e3f2b9d289f5493037e43c7f4108baee38946fe9aba4121d93649d37ad2
SSDEEP

24576:0LTNKn8KuPQzIWRVigNKNnP9Ra+8w7cnRGDrlSmXjX0tdyoUAo+H/t8Ijk7C:0vNK8AIWREgOP6RGDTXkUAo+f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
241f961b006fa3a62d52f871a845ba4380986ffcf930d1cd68889a5295462543N

Files

241f961b006fa3a62d52f871a845ba4380986ffcf930d1cd68889a5295462543N
.exe windows:4 windows

b8d582e543709038be09608585ecf270

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThread
VirtualAlloc

user32

GetShellWindow

Sections

.text
Size: 672KB - Virtual size: 672KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE