440b747e3b2dd7609818247ffb494cd4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

440b747e3b2dd7609818247ffb494cd4
Size

132KB
MD5

440b747e3b2dd7609818247ffb494cd4
SHA1

e61b0462cb430cd6cc1bf68c0c31c0c0e8e5ec62
SHA256

51f89563dc5bb97a098ec363db25bfdf0c3b6e24e0291d1062f3ec009b1eb8b6
SHA512

f3332f8ca198082630ed97a2fa6498a38ffda50622d54793c2ac27b6f17effb11937799fc816e9b18b642a02ce03ef812446ab409b9f3a242a3fef02c8cdd8be
SSDEEP

3072:dlzW9OCBPXcSEMdmDgyWivIo8ntX8VJAc1dgC7:dl9ChD/i92tsSC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
440b747e3b2dd7609818247ffb494cd4

Files

440b747e3b2dd7609818247ffb494cd4
.exe windows:4 windows x86 arch:x86

92cb819a17fc773833461e8d004f147e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA

ole32

GetHGlobalFromStream

msvbvm60

ord690

Sections

pec1
Size: 121KB - Virtual size: 400KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pec
Size: 1KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE