40dcb3614c663e7ef659044a6514d446[.]exe

General

Target
40dcb3614c663e7ef659044a6514d446.exe
Size 283KB
Sample230528-pl66qafa85
SHA256 069b749dc167bae6560ea3f73a461184f0380f6ae3ffcfc095488063da4f9554
MD5 40dcb3614c663e7ef659044a6514d446
SHA1 4c25245ddbea2d5fb5330ce333d313a4973e5b98
SHA512 06520e1bb1c3f06428738ba5f10dd0445bc2fedaa461e5d53f2a5727718f88b138dafc08658d3598b317a06c97bd26b543b8685f52f948952384939a715ecfd4
SSDEEP 3072:5NifDzAVBXaRLmIuLQO4RfI0NlusQ8+kdMEuj8hxdd5gWw9KDD5Qj:afDzA6RcefIq3Q/kWEu4GZYDDej
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40dcb3614c663e7ef659044a6514d446.exe

File Explorer

40dcb3614c663e7ef659044a6514d446.exe

.exe 283KB

40dcb3614c663e7ef659044a6514d446.exe

IMPHASH 937554e81340ac479b370382e43a74d4
SHA256 069b749dc167bae6560ea3f73a461184f0380f6ae3ffcfc095488063da4f9554
MD5 40dcb3614c663e7ef659044a6514d446
SHA1 4c25245ddbea2d5fb5330ce333d313a4973e5b98
SHA512 06520e1bb1c3f06428738ba5f10dd0445bc2fedaa461e5d53f2a5727718f88b138dafc08658d3598b317a06c97bd26b543b8685f52f948952384939a715ecfd4
SSDEEP 3072:5NifDzAVBXaRLmIuLQO4RfI0NlusQ8+kdMEuj8hxdd5gWw9KDD5Qj:afDzA6RcefIq3Q/kWEu4GZYDDej
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

19017

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW VirtualFree IsBadReadPtr GetConsoleAliasesLengthA WaitForMultipleObjectsEx GetPrivateProfileIntA FreeConsole GetVersionExW WritePrivateProfileStructW MulDiv GetModuleFileNameW CreateActCtxA WritePrivateProfileStringW ReplaceFileA GetStringTypeExA GetStdHandle GetLogicalDriveStringsA OpenMutexW GetLastError ReadConsoleOutputCharacterA GetProcAddress SleepEx VirtualAlloc _hwrite LoadLibraryA InterlockedExchangeAdd LocalAlloc GetFileType CreateFileMappingW FindFirstVolumeMountPointW GetNumberFormatW CreateEventW GetModuleFileNameA lstrcmpiW GetModuleHandleA CreateMutexA GetFileAttributesExW GetConsoleCursorInfo ScrollConsoleScreenBufferA GetCurrentThreadId FindAtomW EnumResourceLanguagesW DebugBreak FindNextVolumeA AddConsoleAliasW CancelWaitableTimer GetCommState WaitForSingleObject AttachConsole GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree WideCharToMultiByte SetHandleCount DeleteCriticalSection EnterCriticalSection LeaveCriticalSection Sleep ExitProcess WriteFile FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount HeapSize SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers CreateFileA CloseHandle

user32

CharLowerBuffA

gdi32

EnumFontsW GetCharABCWidthsFloatA GetCharWidthW

advapi32

MapGenericMask

Sharing