40267166c5d15bea8e5c8765363eec1e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40267166c5d15bea8e5c8765363eec1e
Size

10KB
MD5

40267166c5d15bea8e5c8765363eec1e
SHA1

55c0982444496044c7d45926df22b101f3a51135
SHA256

42a732c15bfbd5c7a131f1b5a1598e6f56209026b4b7f8ac43d4f7f4bcbc8330
SHA512

34bd40b4e18323875c970b8d5d236df5d6effbe50db68142da7c00b408dd6f2ee44395128b2cd10528281b06e6d9fef080368a6cec3c116507863bb69945dbac
SSDEEP

192:bQoJ9NAoabD1hU/YVy5M8CBhsGAXhhejjdSctOB7Ypp/TqBBay:b38oabDwJCvspX/ojdZLkB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40267166c5d15bea8e5c8765363eec1e

Files

40267166c5d15bea8e5c8765363eec1e
.exe windows:1 windows x86 arch:x86

989ba11eee4f92dd0da1cb36b46636fa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleHandleA
Sleep

user32

CreateWindowExA
DefWindowProcA
DispatchMessageA
GetClientRect
GetMessageA
InvalidateRect
LoadCursorA
LoadIconA
RegisterClassA
TranslateMessage

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 615B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data?
Size: 512B - Virtual size: 386B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 416B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ