40addf9aa77bfeaabe29feed9629a892 | Triage

Sharing

General

Target

40addf9aa77bfeaabe29feed9629a892
Size

747KB
MD5

40addf9aa77bfeaabe29feed9629a892
SHA1

c027ccf6359de5dd5392af998e3645c05c4787a9
SHA256

6becd0ce43db061654c531d03ca4d87a7359709c5e156a4c7091ec1ac9061f1f
SHA512

ca5231f89045464c6c9cc032382ceaa060e9964a85a589544f88e3d75fed9ec6a01e6f108d6f479dcc120ebd4a6b0c61af51c578274a52df4f32ee00eec21acb
SSDEEP

12288:FECVVI20GoJ+PEVAiCn6pDQEtrT3K7ak6sDCTNVSbYgV8whqPhjuPAelThhAHZSu:LvI20G8+c3DpUzk4iVUtr8F0AOThS5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40addf9aa77bfeaabe29feed9629a892

Files

40addf9aa77bfeaabe29feed9629a892
.exe windows:5 windows x86 arch:x86

dc03ea439a1b5cdddd188197d1b2001d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnterCriticalSection
CancelIo
GetCommandLineA
GetFileAttributesA
LocalSize
IsBadReadPtr
GetFileTime
HeapFree
lstrlenA
CloseHandle
FindVolumeClose
CreateSemaphoreA
GetModuleFileNameA
FindClose
WaitForMultipleObjects
FindVolumeClose
GetFileType
WriteFile
ExitThread
GetDriveTypeA
CreateDirectoryA
GetCurrentDirectoryW
GetModuleHandleA
HeapCreate
GetTickCount

uxtheme

IsThemeActive
GetThemeColor
DrawThemeBackground
GetThemeBool
GetWindowTheme
SetWindowTheme
GetThemeTextMetrics
DrawThemeEdge
CloseThemeData
GetThemeEnumValue
GetThemeTextExtent
OpenThemeData
CloseThemeData

drprov

NPGetCaps
NPGetCaps
NPGetCaps
NPGetCaps

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 740KB - Virtual size: 739KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE