40db59bd5a65d0a1a7ac4a7b690fc9d1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40db59bd5a65d0a1a7ac4a7b690fc9d1
Size

1.5MB
MD5

40db59bd5a65d0a1a7ac4a7b690fc9d1
SHA1

6135692fcd8cf40cb271b0d955d81441d308c397
SHA256

66c58d498856f83d9d4537def5198e167b2a7bf5917094659b6df7c6a5ecc07c
SHA512

245cf4a199667b19e0bb49e736bb6a66f7af7c77d3d8d147c639a4f74bd493c8ecf533a1bb38f22a3e6e42ab54cb2b8b4d3a62b160bba87c4961d704c1e13432
SSDEEP

24576:9/JhW5oaXpcB7mVSaccPuvcd5OGQT/1/0nS+7n4SYwqK4zf3RTsAHWAgqChJ+huc:B+iecy1Cx7TH/NQuiNB/e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40db59bd5a65d0a1a7ac4a7b690fc9d1

Files

40db59bd5a65d0a1a7ac4a7b690fc9d1
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 363KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ