40c334c01fe3c5de776c0a3bdeff0b89 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40c334c01fe3c5de776c0a3bdeff0b89
Size

6.1MB
MD5

40c334c01fe3c5de776c0a3bdeff0b89
SHA1

c8d5c4c2593a83a182956714b8c5767f32a43960
SHA256

767f4e45308f1d85c8288e500d6ff790495fc79d81af8ae288d7902f40afce5c
SHA512

4439e63fdf185481463a3a9ae8480e0dac2f2979a0ddc1ae8ab9d37442b25503c79178e3d83d486a466894bcc1122073b52b399d96fe19bf8afe3d415714d856
SSDEEP

196608:+WMYhS7X5lnkvU+C0FtAxU/8XQY7zjM/j4f:+Wls73kvW5UkjH8cf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40c334c01fe3c5de776c0a3bdeff0b89

Files

40c334c01fe3c5de776c0a3bdeff0b89
.exe windows:4 windows x86 arch:x86

12aa15acef75b51fdd72a2ef651c7351

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord2614
ord941
ord6663
ord5856
ord540
ord860
ord2915
ord6877
ord537
ord800
ord823
ord6648
ord825

msvcrt

??1type_info@@UAE@XZ
_except_handler3
_vsnprintf
__CxxFrameHandler
_CxxThrowException

kernel32

GetProcAddress
LoadLibraryA

Exports

Exports

ExitApp
InitApp

Sections

.text
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6.0MB - Virtual size: 6.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ