41cc3b28c686cea6177d26ce61337fd19e63eafdbe55c81606f5fd65ff6db474[.]exe

General

Target

41cc3b28c686cea6177d26ce61337fd19e63eafdbe55c81606f5fd65ff6db474.exe
Size

120KB
MD5

c3e63af7f126aef459396c2aa1105a88
SHA1

c6dd5998c41b97645d722344aac3096243da21e6
SHA256

41cc3b28c686cea6177d26ce61337fd19e63eafdbe55c81606f5fd65ff6db474
SHA512

2cee3a1c598e30c294ea8bc95b853fea59d13977932c5658dbb3ac732ffd228e6ccfd37c4e913e102a5920dd2707d8968d2a982e528abd1b50ca848470dc2610
SSDEEP

3072:GIDU3z73/LxF31wAf/px5ibGWjPcLqdl6DFZtZPzE:uz/q2/povjPnwNZbE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41cc3b28c686cea6177d26ce61337fd19e63eafdbe55c81606f5fd65ff6db474.exe

Files

41cc3b28c686cea6177d26ce61337fd19e63eafdbe55c81606f5fd65ff6db474.exe
.exe windows:4 windows x86 arch:x86

483117b9381fca257d4bbadeed80312f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

FindResourceA
ReadFile
GetModuleHandleA
GetFileSize
GetCurrentDirectoryW
IsBadWritePtr
SetFileTime
GetStartupInfoW
SetFileTime
GetLastError
CreateMutexW
CloseHandle
SetFileAttributesW
InitializeCriticalSection
GetLocalTime
lstrcatA
LeaveCriticalSection
SetFileTime
lstrcpyA
HeapCreate
FormatMessageW

msi

MsiAdvertiseProductA
MsiCloseAllHandles
MsiCreateRecord
MsiCloseHandle

user32

PostMessageW
wsprintfW
PeekMessageW
IsWindow
GetWindowLongW
DispatchMessageA
IsDialogMessageA
LoadCursorW
GetWindowTextA
IsZoomed
SetFocus
GetWindowRect
SetCursorPos

wldap32

ldap_add

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data1
Size: 1024B - Virtual size: 193B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 512B - Virtual size: 146B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

483117b9381fca257d4bbadeed80312f

Headers

File Characteristics

Imports

kernel32

msi

user32

wldap32

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 105KB - Virtual size: 104KB

.data1 Size: 1024B - Virtual size: 193B

.data2 Size: 512B - Virtual size: 146B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 105KB - Virtual size: 104KB

.data1
Size: 1024B - Virtual size: 193B

.data2
Size: 512B - Virtual size: 146B