40b4130a2e58c8a751904bfdbf0c7389 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40b4130a2e58c8a751904bfdbf0c7389
Size

61KB
MD5

40b4130a2e58c8a751904bfdbf0c7389
SHA1

28c569660e618938369f2a5980673d3b737b8d8e
SHA256

a148098bae7ee6c1420c601b5bda4790fd38530302539de3866ba692fd9e355a
SHA512

22eaedc07e5b1dea6da1952e73db24b975ec019b604e5f9ac1bf45ccc262a17f7e9d2558a955b634b136859a8fe25a19dc0ff7635475e8692935a050bc4afae2
SSDEEP

1536:41wafgYLJGbtnlfH2L8I84nE4mP54odBYaa2ZltA15AbhE/D:41RINxnlfw8eE4muoP/lomtQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40b4130a2e58c8a751904bfdbf0c7389

Files

40b4130a2e58c8a751904bfdbf0c7389
.exe windows:4 windows x86 arch:x86

452dacdc721db4872fb52ec07abc652c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetOEMCP
GetModuleFileNameA
LoadLibraryA
VirtualAllocEx

user32

GetCapture
GetDesktopWindow
ScrollWindow
ScreenToClient
SendMessageA
RemoveMenu
GetMenu

advapi32

RegDeleteKeyA
RegQueryInfoKeyA

gdi32

BitBlt
GetRgnBox
GetPaletteEntries
SetTextColor
SetBkColor
SetPixel
GetBkColor
GetBkMode
GetTextColor
SaveDC

Exports

Exports

_s5vrv@8
_TCK3R@8
_W4OK8emNeFZ@24
_rengnrPaT
_7DL4MZHT2bJcN
lbtiz59dYlIVnA@12
NM3N8X@24

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ