40e54c258b916aca093f783eeb66b638 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40e54c258b916aca093f783eeb66b638
Size

337KB
MD5

40e54c258b916aca093f783eeb66b638
SHA1

25726be8ef1ce6caeacc0982dcf4b19977e964ea
SHA256

17a2d112d03c261a2fc6078cef4ed5d9e51fa368f5fa702221f32778fb5637fb
SHA512

4843f5b596b5ffeb0323bdb651ae56c9e02eb8b5d4b996823d565d7df80e21b9b85bf1ca7ccc6cd7afe2f44e2299599044177153158a8fd33f1d09d4bcc37104
SSDEEP

6144:u7Fhjrxd4lakFcJtX7HW5XH7Xv6Ak2GBJR1ND1iS6uq3kPdyumdBFN:uFhj1CrFc3X7HoHj2D/z6fUA/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40e54c258b916aca093f783eeb66b638

Files

40e54c258b916aca093f783eeb66b638
.exe windows:4 windows x86 arch:x86

902ad327a82ff3a35359f4ed270735bc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
lstrcatA
GetTickCount
SetLastError
CreateThread
GetDiskFreeSpaceW
CreateFileA
LoadLibraryA
GetFileAttributesA
LoadLibraryW
FindAtomA
ReleaseMutex
HeapCreate
GetComputerNameA
ReleaseMutex
GetSystemTime
SetEvent
GetDriveTypeW
GetCommandLineA
CloseHandle

user32

CloseWindow
GetKeyState
GetClipCursor
CallWindowProcA
SetFocus
GetDlgItem
FillRect
GetClassInfoA
DispatchMessageA
DrawStateA
GetComboBoxInfo
DestroyCaret
CreateWindowExA

cryptnet

CertDllVerifyCTLUsage
CryptUninstallCancelRetrieval
CryptCancelAsyncRetrieval
CryptGetObjectUrl
CryptGetTimeValidObject

desk.cpl

DisplaySaveSettings

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 412KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 324KB - Virtual size: 324KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ