40b7eef52200af34fbaf72127e7b86c4a705c80c2dfe219b48d2a62788e39413 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40b7eef52200af34fbaf72127e7b86c4a705c80c2dfe219b48d2a62788e39413
Size

658KB
MD5

b9c5535a12ff8db6e46647822d39d494
SHA1

7c510d95b15641bbfcc384e29399c52f36a4af87
SHA256

40b7eef52200af34fbaf72127e7b86c4a705c80c2dfe219b48d2a62788e39413
SHA512

19f4e4e0b9ee45be10405a6289954bea40af3aa13a24eaa2bde35d64875f327ed193a3917a2398e8f3ff61cf07e341a8b1223f6226869eda480e8497bb4a0d3b
SSDEEP

768:u0IYDhKjlGwkjHrx+TBwJ4e7gWplZ/4Vpeac4rNN0WSSlgX092ckC/0ZASDKyUdn:TQLNmg6y4ytQqqv5fnHZ5UV5TB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40b7eef52200af34fbaf72127e7b86c4a705c80c2dfe219b48d2a62788e39413

Files

40b7eef52200af34fbaf72127e7b86c4a705c80c2dfe219b48d2a62788e39413
.exe windows:1 windows x86

140094f13383e9ae168c4b35b6af3356

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
ExitProcess
GetComputerNameA
GetModuleFileNameA
GetModuleHandleW
GetProcAddress
SetErrorMode
Sleep
VirtualAllocExNuma

shlwapi

PathFindFileNameA

msvcrt

malloc
free
memset
strcmp
_strcmpi
strcpy

Sections

.text
Size: 656KB - Virtual size: 656KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 788B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ