40d32f946c75747f2f904656e7bfb552 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40d32f946c75747f2f904656e7bfb552
Size

1.5MB
MD5

40d32f946c75747f2f904656e7bfb552
SHA1

b839ef483cafdc2ecba0fdb0e32621c96d0875f5
SHA256

6ac0fadb6a2f1b55f3e30392369720343cbe0745aa7a8d6dbd8f1e6abcb32ba2
SHA512

7ec802990d6acc6f26c522b77f3db035f6373f14b6a76eae42d2f1949b3b6510c554bab8029dca5a4760f550fbc9186e92cc0b00be841178a77289fc721055e0
SSDEEP

24576:xFGRbnjmJE6LMITtqEtZnSkvaTg3kakFn4vdU6pl4W0XRtMNBqN91OS6ysH+Te5P:ujmJHLMITHtZSkyTg3kakR4zMwHY1nsB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40d32f946c75747f2f904656e7bfb552

Files

40d32f946c75747f2f904656e7bfb552
.exe windows:5 windows x86 arch:x86

ac29710119e8c1900c82172f1476daaf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep

user32

GetKeyboardType
CreateWindowExA

advapi32

RegQueryValueExA
RegQueryValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

wsock32

WSACleanup

msvcrt

__dllonexit

psapi

GetMappedFileNameW

Sections

CODE
Size: 220KB - Virtual size: 452KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ