440f9bec2cc165928e9fdcfecc464d86 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

440f9bec2cc165928e9fdcfecc464d86
Size

63KB
MD5

440f9bec2cc165928e9fdcfecc464d86
SHA1

a2fe6d3b6601297402c1052d7de2c1bedb0a7787
SHA256

52ea793c8f193b95b54e4d1c3adce99f2ad83dd4514e965f788635a44facf46d
SHA512

4d5287ab3f9d32c56180963860a1ee57a4287d2ff1e3edb577332c2c25cc563fa03c12042c126914b82bf4b4dfbf8ab0490181d4f5bba813c24f4db320d74563
SSDEEP

1536:qFFFS0EH2xA27p718y6+v3Ggfn5Ccn3+VyIswaoJBW/eRS5j:qFFFbEWLJv3G1i+iom2g5j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
440f9bec2cc165928e9fdcfecc464d86

Files

440f9bec2cc165928e9fdcfecc464d86
.exe windows:4 windows x86 arch:x86

85e5ee9292b546132e3cc450f9c32da7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlen
WriteProfileStringA
CompareStringA
WriteProfileSectionA
DeleteFileW
OutputDebugStringA
CreateProcessA
AssignProcessToJobObject
GetSystemPowerStatus
QueryActCtxW
EnumCalendarInfoExA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE